workreap
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Workreap (theme's plugin) <= 3.3.6 - Authenticated (Subscriber+) SQL Injection | workreap | WordPress | Medium | No fix reported | |
| Workreap <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Deletion | workreap | WordPress | High | Fix reported | |
| Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' | workreap | WordPress | Critical | Fix reported | |
| Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' | workreap | WordPress | High | Fix reported | |
| Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover | workreap | WordPress | Critical | Fix reported |