CVE-2022-3846

The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification employer or freelancer as the notification ID is brute-forceable...

PT-2022-24414 · WordPress · Workreap

Name of the Vulnerable Software and Affected Versions: Workreap WordPress theme versions prior to 2.6.3 Description: The issue affects the notifications feature, allowing unauthorized access to any user's notification, whether employer or freelancer, due to the notification ID being...