CVE-2022-4794
AAWP < 3.12.3 - Unsafe URL Handling
High · published January 30, 2023
What it is
The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00797 · 56.0th percentile
- Published
- 2023-01-30T20:31Z
EPSS history
Timeline