Skip to content
OpenAdvisories

Product · AmentoTech

Workreap

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-4973

    Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'

    The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1. This is due to the plugin not properly verifying a user's identity prior to lo…

    AmentoTech Workreap Web / CMS
  • Critical 9.8
    CVE-2024-13446

    Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover

    The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. This is due to the plugin not properly validating a user's identity prior to (1) performing a social auto-login or (2) up…

    AmentoTech Workreap Web / CMS