WordPress Files Download Delay plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Files Download Delay plugin versions prior to 1.0.7 are vulnerable to cross-site request forgery, which stems from the plugin’s failure to authorize and CSRF checks when resetting its settings. An attacker could exploit this vulnerability to allow any authenticated user (such as a subscriber) to perform a cross-site request forgery attack.