What’s Vulnerable › Vulnerabilities

CVE-2021-24499: Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 60.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-09 · updated 2026-06-17
• Weakness: CWE-434

Description

The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to the uploads/workreap-temp directory. Uploaded files were neither sanitized nor validated, allowing an unauthenticated visitor to upload executable code such as php scripts.

Affected products

• Workreap: before 2.2.2 — fixed in 2.2.2

How to fix

Upgrade to a fixed version: Workreap 2.2.2. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/172876/WordPress-Workreap-2.2.2-Shell-Upload.html
• https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/
• https://wpscan.com/vulnerability/74611d5f-afba-42ae-bc19-777cdf2808cb
• http://packetstormsecurity.com/files/172876/WordPress-Workreap-2.2.2-Shell-Upload.html
• https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/
• https://wpscan.com/vulnerability/74611d5f-afba-42ae-bc19-777cdf2808cb

Get alerted when CVE-2021-24499 or the next vulnerability affects your stack