Advisories · Technology

AmentoTech Workreap Core.

Every CVE that names AmentoTech Workreap Core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112822 CVE record

CVSS 8.5 High

WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability
- AmentoTech Workreap Core
- SQL injection
Not analysed yet 22 Oct 2026
CVE-2026-39759 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability
- AmentoTech Workreap Core
- Unrestricted file upload
Not analysed yet 6 Oct 2026
CVE-2025-69101 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
- AmentoTech Workreap Core
- Authentication bypass
Not analysed yet 22 Jan 2026