Skip to content
OpenAdvisories

Vendor

AmentoTech

19 known vulnerabilities.

Products

Taskbot 3 Workreap Core 3 Doctreat 3 Workreap 3 Workreap (theme's plugin) 2 Doctreat Core 2 Tuturn 2 WP Guppy 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-39773

    WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

    AmentoTech Doctreat Core
  • Critical 10.0
    CVE-2026-39770

    WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

    Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.

    AmentoTech Doctreat
  • Critical 9.9
    CVE-2026-39759

    WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability

    Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

    AmentoTech Workreap Core
  • Critical 9.9
    CVE-2026-39757

    WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

    Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

    AmentoTech Taskbot
  • Critical 9.8
    CVE-2026-39753

    WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

    AmentoTech Taskbot
  • Critical 9.8
    CVE-2025-6254 Public exploit

    Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

    The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes …

    AmentoTech Doctreat Core Web / CMS
  • Critical 9.8
    CVE-2025-69101

    WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreap_core allows Authentication Abuse.This issue affects Workreap Core: from n/a through <= 3.4.1.

    AmentoTech Workreap Core
  • Critical 9.8
    CVE-2025-64236

    WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6.

    AmentoTech Tuturn
  • Critical 9.8
    CVE-2025-4973

    Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'

    The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1. This is due to the plugin not properly verifying a user's identity prior to lo…

    AmentoTech Workreap Web / CMS
  • Critical 9.8
    CVE-2024-13446

    Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover

    The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. This is due to the plugin not properly validating a user's identity prior to (1) performing a social auto-login or (2) up…

    AmentoTech Workreap Web / CMS