title: AAWP < 3.12.3 - Unsafe URL Handling
description: The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.
problem types: CWE-639 Authorization Bypass Through User-Controlled Key
affected:
{
vendor: Unknown
product: AAWP
versions:
status: affected, versionType: custom, version: 0, lessThan: 3.12.3
defaultStatus: unaffected
}