CVE Intelligence

AmentoTech Workreap (theme's plugin) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AmentoTech Workreap (theme's plugin): 2 record(s), with affected versions and fixes.

CVE-2025-22728 High · 8.5 CWE-89 Jan 8, 2026
WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows SQL Injection.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.6.
CVE-2025-59566 High · 7.7 CWE-22 Oct 22, 2025
WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows Path Traversal.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.5.