CVE-2022-4794 (amazon_affiliate_wordpress_plugin)

The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.

abuse bypass companies cve domains download file files firewall firewall rules malware plugin rules wordpress wordpress plugin