Skip to content
OpenAdvisories
High · 8.5 CVE-2025-22728 EUVD-2026-1535GHSA-jx85-v8cw-87h5

WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability

Published Jan 8, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows SQL Injection.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.6.

Affected products

VendorProductAffectedFixed
AmentoTech Workreap (theme's plugin) ≤ 3.3.6 —

References