PatchTheCVECVE-2022-1570: The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseti
CVE-2022-1570 is a medium-severity flaw (CVSS 6.5) affecting files download delay. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.
Why this priority
- Public exploit reference
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-1570?
files download delay: upgrade to 1.0.7. Exact commands for each OS are on this page.
Is CVE-2022-1570 being exploited?
CVE-2022-1570 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-1570 affect?
CVE-2022-1570 affects files download delay. Severity is medium (CVSS 6.5). The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.
How urgent is CVE-2022-1570?
Priority 37/100. Public exploit reference