Lucene search
WPScanCVELIST:CVE-2022-4794HistoryJan 30, 2023 - 8:31 p.m.
CVE-2022-4794 AAWP < 3.12.3 - Unsafe URL Handling
2023-01-3020:31:32
WPScan
www.cve.org
2
aawp
wordpress
plugin
unsafe url handling
reflected file download
cve-2022-4794
firewall bypass
EPSS
0.002
Percentile
58.9%
The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.
CNA Affected
[
{
"vendor": "Unknown",
"product": "AAWP",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "3.12.3"
}
],
"defaultStatus": "unaffected"
}
]Related
wpexploit
wpexploit
AAWP < 3.12.3 - Unsafe URL Handling
2023-01-04 00:00:00
prion
prion
Design/Logic Flaw
2023-01-30 21:15:00
cve
cve
CVE-2022-4794
2023-01-30 21:15:12
wpvulndb
wpvulndb
AAWP < 3.12.3 - Unsafe URL Handling
2023-01-04 00:00:00
nvd
nvd
CVE-2022-4794
2023-01-30 21:15:12