Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-1570
HistoryJun 08, 2022 - 10:15 a.m.

Cross site request forgery (csrf)

2022-06-0810:15:00
PRIOn knowledge base
www.prio-n.com
2

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.

CPENameOperatorVersion
files_download_delaylt1.0.7

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%