Skip to content
OpenAdvisories

Vendor

AmentoTech

19 known vulnerabilities.

Products

Taskbot 3 Workreap Core 3 Doctreat 3 Workreap 3 Workreap (theme's plugin) 2 Doctreat Core 2 Tuturn 2 WP Guppy 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.5
    CVE-2026-112822

    WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreap_core allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4.

    AmentoTech Workreap Core
  • High 8.5
    CVE-2025-22728

    WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows SQL Injection.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.6.

    AmentoTech Workreap (theme's plugin)
  • High 7.7
    CVE-2025-59566

    WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows Path Traversal.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.5.

    AmentoTech Workreap (theme's plugin)
  • High 7.1
    CVE-2025-58971

    WordPress Doctreat theme <= 1.6.7 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AmentoTech Doctreat doctreat allows Reflected XSS.This issue affects Doctreat: from n/a through <= 1.6.7.

    AmentoTech Doctreat
  • High 7.7
    CVE-2025-58959

    WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Taskbot taskbot allows Path Traversal.This issue affects Taskbot: from n/a through <= 6.4.

    AmentoTech Taskbot
  • High 8.8
    CVE-2025-5012

    Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'

    The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'workreap_temp_upload_to_media' function in all versions up to, and including, …

    AmentoTech Workreap Web / CMS
  • High 8.5
    CVE-2025-31920

    WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Guppy wp-guppy allows SQL Injection.This issue affects WP Guppy: from n/a through <= 4.3.3.

    AmentoTech WP Guppy