CVE-2022-4794EPSS p52.9%
CVE-2022-4794CVE-2022-4794
getaawp / amazon_affiliate_wordpress_plugin
Description
The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.
Scoring
| CVSS | 7.5 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| EPSS | 0.80% probability of exploitation · percentile 52.9% · 2026-08-03T12:00:16Z |
| Last modified | 2026-06-17 |