Workreap (theme's plugin) vulnerabilities | LiveThreat CVE Feed

Product

Workreap (theme's plugin)

by AmentoTech · last CVE Jan 8, 2026

CVEs

On KEV

8.5

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 0Low 0

Severity

Exploitation

Watch

Add Workreap (theme's plugin) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-22728	8.5	0%	Jan 8	WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability Affected: through 3.3.6
CVE-2025-59566	7.7	0%	Oct 22	WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability Affected: through 3.3.5