Workreap
AmentoTech · 8 CVEs
Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'
Jun 12, 2025
Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'
Jun 12, 2025
Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover
Mar 12, 2025
Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR
Dec 26, 2022
Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR
Dec 5, 2022
Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions
Aug 9, 2021
Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities
Aug 9, 2021
Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
Aug 9, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-4973 | Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' | CRITICAL | 0.48% | Jun 12, 2025 |
| CVE-2025-5012 | Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' | HIGH | 0.60% | Jun 12, 2025 |
| CVE-2024-13446 | Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover | CRITICAL | 0.43% | Mar 12, 2025 |
| CVE-2022-4239 | Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR | MEDIUM | 0.60% | Dec 26, 2022 |
| CVE-2022-3846 | Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR | HIGH | 0.84% | Dec 5, 2022 |
| CVE-2021-24501 | Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions | HIGH | 1.25% | Aug 9, 2021 |
| CVE-2021-24500 | Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities | HIGH | 0.65% | Aug 9, 2021 |
| CVE-2021-24499 | Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution | CRITICAL | 60.11% | Aug 9, 2021 |
Showing 1 to 8 of 8 CVEs