3 matches found
CVE-2022-4794
The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it Reflected File Download to bypass firewall rules in companies...
7.5CVSS6.8AI score0.00797EPSS
SaveExploits2
CVE-2022-4794
The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it Reflected File Download to bypass firewall rules in companies...
7.5CVSS7.5AI score0.00797EPSS
SaveExploits2References1
PT-2023-15536
Name of the Vulnerable Software and Affected Versions AAWP WordPress plugin versions prior to 3.12.3 Description The issue allows the AAWP WordPress plugin to be used for abusing trusted domains, enabling the loading of malware or other files through it, which is known as Reflected File Download...
7.5CVSS0.00797EPSS
SaveExploits2References5
20