WO
Product
Workreap
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add Workreap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5012 | 8.8 | Jun 12 | Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' Affected: through 3.3.2 |
| CVE-2021-24501 | 8.1 | Aug 9 | The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as… Affected: before 2.2.2 |
| CVE-2021-24500 | 8.1 | Aug 9 | Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated Affected: before 2.2.2 |
| CVE-2022-3846 | 7.5 | Dec 5 | The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification (employer or freelancer) as the… Affected: before 2.6.3 |
Showing 4