Skip to content
OpenAdvisories
High · 7.7 CVE-2025-59566 EUVD-2025-35435GHSA-23hc-gf5p-jq23

WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability

Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: AmentoTech Product: Workreap (theme's plugin)

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Workreap (theme's plugin) workreap allows Path Traversal.This issue affects Workreap (theme's plugin): from n/a through <= 3.3.5.

Affected products

VendorProductAffectedFixed
AmentoTech Workreap (theme's plugin) ≤ 3.3.5 —

References