CVE-2022-1570
Files Download Delay < 1.0.7 - Subscriber+ Settings Reset
MEDIUM 6.5EPSS 0.4%
The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.
- Affected
- Files Download Delay
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 4.0 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N - EPSS
- 0.42% chance of exploitation in the next 30 days, 35th percentile
- Published
- 2022-06-06
- Updated
- 2024-08-03