7.5
CVSSv3

CVE-2022-4794

Published: 30/01/2023 Updated: 07/11/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

The AAWP WordPress plugin prior to 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

getaawp amazon affiliate wordpress plugin