Amentotech vulnerabilities

Products

• Workreap 8
• Doctreat 3
• Taskbot 3
• Workreap Core 3
• Doctreat Core 2
• Tuturn 2
• Workreap (theme's Plugin) 2
• Wp Guppy 2

Newest

• amentotech workreap core WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability CVE-2026-112822 8.5 HighOctober 22, 2026
• amentotech doctreat core WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability CVE-2026-39773 10.0 CriticalOctober 6, 2026
• amentotech doctreat WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability CVE-2026-39770 10.0 CriticalOctober 6, 2026
• amentotech workreap core WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability CVE-2026-39759 9.9 CriticalOctober 6, 2026
• amentotech taskbot WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability CVE-2026-39757 9.9 CriticalOctober 6, 2026
• amentotech taskbot WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability CVE-2026-39753 9.8 CriticalOctober 6, 2026
• amentotech doctreat core Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation CVE-2025-6254 Public exploit 9.8 CriticalJune 10, 2026
• amentotech workreap core WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability CVE-2025-69101 9.8 CriticalJanuary 22, 2026
• amentotech workreap (theme's plugin) WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability CVE-2025-22728 8.5 HighJanuary 8, 2026
• amentotech tuturn WordPress Tuturn plugin < 3.6 - Arbitrary File Download vulnerability CVE-2025-64235 6.5 MediumDecember 18, 2025
• amentotech tuturn WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability CVE-2025-64236 9.8 CriticalDecember 18, 2025
• amentotech workreap (theme's plugin) WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability CVE-2025-59566 7.7 HighOctober 22, 2025
• amentotech doctreat WordPress Doctreat theme <= 1.6.7 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58971 7.1 HighOctober 22, 2025
• amentotech doctreat WordPress Doctreat theme <= 1.6.7 - Content Injection vulnerability CVE-2025-58970 6.3 MediumOctober 22, 2025
• amentotech taskbot WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerability CVE-2025-58959 7.7 HighOctober 22, 2025
• amentotech workreap Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' CVE-2025-5012 8.8 HighJune 12, 2025
• amentotech workreap Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' CVE-2025-4973 9.8 CriticalJune 12, 2025
• amentotech wp guppy WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability CVE-2025-31920 8.5 HighJune 9, 2025
• amentotech workreap Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover CVE-2024-13446 9.8 CriticalMarch 12, 2025
• amentotech workreap Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR CVE-2022-4239 6.5 MediumDecember 26, 2022
• amentotech workreap Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR CVE-2022-3846 7.5 HighDecember 5, 2022
• amentotech wp guppy WP Guppy < 1.3 - Sensitive Information Disclosure CVE-2021-24997 6.5 MediumDecember 27, 2021
• amentotech workreap Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions CVE-2021-24501 8.1 HighAugust 9, 2021
• amentotech workreap Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities CVE-2021-24500 8.1 HighAugust 9, 2021
• amentotech workreap Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution CVE-2021-24499 Public exploit EPSS 60.1% 9.8 CriticalAugust 9, 2021