118 matches found
CVE-2021-24499
CVE-2021-24499 CVE-2021-24499的大规模利用：Workreap主题中未经身份验证的上传导致远程代码执行。 AJAX操作workreapawardtempfileuploader和workreaptempfileuploader未执行nonce检查，也未以任何其他方式验证请求是否来自有效用户。这些端点允许将任意文件上传到uploads/workreap-temp目录。上传的文件既未经过清理也未经过验证，从而允许未经身份验证的访客上传可执行代码（如PHP脚本）。...
WordPress Workreap - Remote Code Execution
WordPress Workreap theme is susceptible to remote code execution. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to th...
CVE-2021-24499
CVE-2021-24499 大规模利用 CVE-2021-24499，未经身份验证的上传导致 Workreap 主题中的远程代码执行。 AJAX 操作 workreapawardtempfileuploader 和 workreaptempfileuploader 未执行 nonce 检查，也未以任何其他方式验证请求是否来自有效用户。这些端点允许将任意文件上传到 uploads/workreap-temp 目录。上传的文件既未经过净化也未进行验证，允许未经身份验证的访客上传可执行代码，例如 php 脚本。...
CVE-2021-24499
CVE-2021-24499 | Workreap - Tema de WordPress para Mercado Freelance y Directorio 2.2.2 - Subida de Archivos Arbitraria Tema de WordPress Workreap 2.2.2 - Subida de Archivos No Autenticada que Conduce a Ejecución Remota de Código Una herramienta de explotación masiva potente y precisa para la...
Exploit for Unrestricted Upload of File with Dangerous Type in Amentotech Workreap
CVE-2021-24499 | Workreap - Freelance Marketplace and Director...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
CVE-2025-69101 describes an Authentication Bypass in the WordPress plugin Workreap Core (versions up to and including 3.4.0). The issue allows Authentication Abuse via an alternate path or channel, potentially enabling an attacker to impersonate legitimate users and perform account takeover. The ...
CVE-2025-69101 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.0...
CVE-2025-69101 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
WordPress plugin Workreap Core has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-4171
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreap core allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.0...
WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by NAWardRox in WordPress Plugin Workreap Core versions = 3.4.1...
CVE-2025-22728
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728
CVE-2025-22728 is an authenticated SQL injection in the Workreap plugin/theme for WordPress (
CVE-2025-22728 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...