AM
Vendor
AmentoTech
24
CVEs
0
On KEV
6
New 30D
Products
TA9.9
Taskbot
AmentoTech
3 CVEs0 on KEV2 new
WC9.9
Workreap Core
AmentoTech
3 CVEs0 on KEV2 new
DO10.0
Doctreat
AmentoTech
3 CVEs0 on KEV1 new
DC10.0
Doctreat Core
AmentoTech
2 CVEs0 on KEV1 new
WO9.8
Workreap
AmentoTech
8 CVEs0 on KEV0 new
TU9.8
Tuturn
AmentoTech
2 CVEs0 on KEV0 new
WT8.5
Workreap (theme's plugin)
AmentoTech
2 CVEs0 on KEV0 new
WG8.5
WP Guppy
AmentoTech
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112822 | WC Workreap Core AmentoTech | 8.5 | Oct 22 | WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability |
| CVE-2026-39773 | DC Doctreat Core AmentoTech | 10.0 | Oct 6 | WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability |
| CVE-2026-39770 | DO Doctreat AmentoTech | 10.0 | Oct 6 | WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability |
| CVE-2026-39759 | WC Workreap Core AmentoTech | 9.9 | Oct 6 | WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability |
| CVE-2026-39757 | TA Taskbot AmentoTech | 9.9 | Oct 6 | WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability |
| CVE-2026-39753 | TA Taskbot AmentoTech | 9.8 | Oct 6 | WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability |
| CVE-2025-6254 | DC Doctreat Core AmentoTech | 9.8 | Jun 10 | Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation |
| CVE-2025-69101 | WC Workreap Core AmentoTech | 9.8 | Jan 22 | WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability |
| CVE-2025-22728 | WT Workreap (theme's plugin) AmentoTech | 8.5 | Jan 8 | WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability |
| CVE-2025-64235 | TU Tuturn AmentoTech | 6.5 | Dec 18 | WordPress Tuturn plugin < 3.6 - Arbitrary File Download vulnerability |
| CVE-2025-64236 | TU Tuturn AmentoTech | 9.8 | Dec 18 | WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability |
| CVE-2025-59566 | WT Workreap (theme's plugin) AmentoTech | 7.7 | Oct 22 | WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability |
| CVE-2025-58971 | DO Doctreat AmentoTech | 7.1 | Oct 22 | WordPress Doctreat theme <= 1.6.7 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-58970 | DO Doctreat AmentoTech | 6.3 | Oct 22 | WordPress Doctreat theme <= 1.6.7 - Content Injection vulnerability |
| CVE-2025-58959 | TA Taskbot AmentoTech | 7.7 | Oct 22 | WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerability |
| CVE-2025-4973 | WO Workreap AmentoTech | 9.8 | Jun 12 | Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' |
| CVE-2025-5012 | WO Workreap AmentoTech | 8.8 | Jun 12 | Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' |
| CVE-2025-31920 | WG WP Guppy AmentoTech | 8.5 | Jun 9 | WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability |
| CVE-2024-13446 | WO Workreap AmentoTech | 9.8 | Mar 12 | Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover |
| CVE-2022-4239 | WO Workreap Amentotech | 6.5 | Dec 26 | The Workreap WordPress theme before 2.6.4 does not verify that an addon service belongs to the user issuing the request, or indeed that it is an addon service, when processing the… |
| CVE-2022-3846 | WO Workreap Amentotech | 7.5 | Dec 5 | The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification (employer or freelancer) as the… |
| CVE-2021-24501 | WO Workreap Amentotech | 8.1 | Aug 9 | The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as… |
| CVE-2021-24500 | WO Workreap Amentotech | 8.1 | Aug 9 | Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated |
| CVE-2021-24499 | WO Workreap Amentotech | 9.8 | Aug 9 | The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request… |