CVE-2022-1570: Files Download Delay Project Files Download Delay

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.

Affected products

• Files Download Delay Project Files Download Delay: before 1.0.7 (fixed in 1.0.7)

Published 2022-06-08. Last modified 2026-06-17.