CVE Intelligence

AmentoTech Workreap Core vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AmentoTech Workreap Core: 2 record(s), with affected versions and fixes.

CVE-2026-39759 Critical · 9.9 CWE-434 Oct 6, 2026
WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability
Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
CVE-2025-69101 Critical · 9.8 CWE-288 Jan 22, 2026
WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreap_core allows Authentication Abuse.This issue affects Workreap Core: from n/a through <= 3.4.1.