Vulnerabilities and Security Researches

Files Download Delay, CVE-2022-1570

CVE, Research URL: CVE-2022-1570
Home page URL: Security reports for Files Download Delay
Application: Files Download Delay
Published on: Jun 08, 2022
Research Description: The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.
Affected versions: max 1.0.7.
Status: vulnerable