AmentoTech Workreap vulnerabilities

3 published CVEs name AmentoTech Workreap among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 0
Critical: 2
Known exploited: 0

Critical 2High 1Medium 0Low 0Not scored 0

Newest CVEs

CVE-2025-4973
Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'
AmentoTech · Workreap
Critical9.8
CVE-2025-5012
Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'
AmentoTech · Workreap
High8.8
CVE-2024-13446
Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover
AmentoTech · Workreap
Critical9.8

Most common weaknesses