Advisories · Technology

Workreap.

Every CVE that names Workreap among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-4239 CVE record

CVSS 6.5 Medium

Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR
- Workreap
Not analysed yet 26 Dec 2022
CVE-2022-3846 CVE record

CVSS 7.5 High

Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR
- Workreap
Not analysed yet 5 Dec 2022
CVE-2021-24501 CVE record

Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax Actions
- Workreap
- Broken access control
- CWE-283
Not analysed yet 9 Aug 2021
CVE-2021-24500 CVE record

Workreap theme < 2.2.2 - Multiple CSRF + IDOR Vulnerabilities
- Workreap
- Broken access control
- CWE-283
Not analysed yet 9 Aug 2021
CVE-2021-24499 CVE record

Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
- Workreap
- Unrestricted file upload
Not analysed yet 9 Aug 2021