← Database

CVE-2022-4794

HIGH CVSS: 7.5 Published: 2023-01-30 Modified: 2026-06-17

Description

The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.

Affected Platforms

Getaawp Amazon Affiliate Wordpress Plugin

Weakness Type

Unknown

References