Amentotech Workreap vulnerabilities

• amentotech workreap core WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability CVE-2026-112822 8.5 HighOctober 22, 2026
• amentotech workreap core WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability CVE-2026-39759 9.9 CriticalOctober 6, 2026
• amentotech workreap core WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability CVE-2025-69101 9.8 CriticalJanuary 22, 2026
• amentotech workreap (theme's plugin) WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability CVE-2025-22728 8.5 HighJanuary 8, 2026
• amentotech workreap (theme's plugin) WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability CVE-2025-59566 7.7 HighOctober 22, 2025
• amentotech workreap Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' CVE-2025-5012 8.8 HighJune 12, 2025
• amentotech workreap Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' CVE-2025-4973 9.8 CriticalJune 12, 2025
• amentotech workreap Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover CVE-2024-13446 9.8 CriticalMarch 12, 2025
• amentotech workreap Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR CVE-2022-4239 6.5 MediumDecember 26, 2022
• amentotech workreap Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR CVE-2022-3846 7.5 HighDecember 5, 2022
• amentotech workreap Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions CVE-2021-24501 8.1 HighAugust 9, 2021
• amentotech workreap Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities CVE-2021-24500 8.1 HighAugust 9, 2021
• amentotech workreap Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution CVE-2021-24499 Public exploit EPSS 60.1% 9.8 CriticalAugust 9, 2021