CVE-2022-4794
AAWP < 3.12.3 - Unsafe URL Handling
- State
- Published
- Severity
- 7.5 High
- Published
- Jan 30, 2023
- Updated
- Mar 28, 2025
- Reserved
- Dec 28, 2022
Description
The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
AAWPUnknown |
|
References
- https://wpscan.com/vulnerability/feb4580d-df15-45c8-b59e-ad406e4b064cexploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.