AmentoTech / Workreap
8 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-4973 | Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' | CRITICAL | 9.8 | Jun 12, 2025 |
| CVE-2025-5012 | Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' | HIGH | 8.8 | Jun 12, 2025 |
| CVE-2024-13446 | Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover | CRITICAL | 9.8 | Mar 12, 2025 |
| CVE-2022-4239 | Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR | MEDIUM | 6.5 | Dec 26, 2022 |
| CVE-2022-3846 | Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR | HIGH | 7.5 | Dec 5, 2022 |
| CVE-2021-24501 | Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions | HIGH | 8.1 | Aug 9, 2021 |
| CVE-2021-24500 | Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities | HIGH | 8.1 | Aug 9, 2021 |
| CVE-2021-24499 | Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution | CRITICAL | 9.8 | Aug 9, 2021 |
Showing 1 to 8 of 8 CVEs