What’s Vulnerable › Products

AmentoTech Workreap Core vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your AmentoTech Workreap Core version is affected

Latest AmentoTech Workreap Core vulnerabilities

• CVE-2026-112822 — WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2026-39759 — WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability (CVSS 9.9)
• CVE-2025-69101 — WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability (CVSS 9.8)