WO
Product
Workreap
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add Workreap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-5012 | 8.8 | Jun 12 | Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' Affected: through 3.3.2 |
| CVE-2021-24501 | 8.1 | Aug 9 | Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions Affected: before 2.2.2 |
| CVE-2021-24500 | 8.1 | Aug 9 | Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities Affected: before 2.2.2 |
| CVE-2022-3846 | 7.5 | Dec 5 | Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR Affected: before 2.6.3 |
Showing 4