7.5
Élevée
CVE-2022-4794 The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it…
Description
The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AAWP 3.12 | premières → < 3.12.3 | 3.12.3 |