118 matches found
CVE-2021-24499
CVE-2021-24499 Workreap 테마에서 인증되지 않은 업로드를 통한 원격 코드 실행으로 이어지는 CVE-2021-24499의 대규모 악용. AJAX 액션 workreapawardtempfileuploader와 workreaptempfileuploader는 nonce 검사를 수행하지 않았으며, 다른 방식으로 요청이 유효한 사용자로부터 온 것인지 검증하지 않았습니다. 엔드포인트는 uploads/workreap-temp 디렉토리에 임의의 파일을 업로드할 수 있도록 허용했습니다. 업로드된 파일은 살균되거나 검증되지 않아...
CVE-2021-24499
CVE-2021-24499 CVE-2021-24499의 대규모 악용: Workreap 테마에서 인증되지 않은 업로드를 통한 원격 코드 실행 AJAX 액션 workreapawardtempfileuploader와 workreaptempfileuploader는 nonce 검사를 수행하지 않았으며, 다른 방식으로 요청이 유효한 사용자로부터 온 것인지 검증하지 않았습니다. 이 엔드포인트는 uploads/workreap-temp 디렉토리에 임의의 파일을 업로드할 수 있게 했습니다. 업로드된 파일은 살균되거나 검증되지 않아, 인증되지 않은...
WordPress Workreap - Remote Code Execution
WordPress Workreap theme is susceptible to remote code execution. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to th...
CVE-2021-24499
CVE-2021-24499 | Workreap - 프리랜스 마켓플레이스 및 디렉토리 WordPress 테마 2.2.2 - 임의 파일 업로드 WordPress 테마 Workreap 2.2.2 - 인증되지 않은 파일 업로드로 인한 원격 코드 실행 WordPress Workreap 테마의 CVE-2021-24499 취약점을 위한 강력하고 정확한 대량 익스플로잇 도구입니다. 이 익스플로잇은 인증되지 않은 파일 업로드를 허용하여 원격 코드 실행RCE으로 이어질 수 있습니다. 📝 설명 CVE-2021-24499는 WordPress...
Exploit for Unrestricted Upload of File with Dangerous Type in Amentotech Workreap
CVE-2021-24499 | Workreap - Freelance Marketplace and Director...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.0...
CVE-2025-69101 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
CVE-2025-69101 describes an Authentication Bypass in the WordPress plugin Workreap Core (versions up to and including 3.4.0). The issue allows Authentication Abuse via an alternate path or channel, potentially enabling an attacker to impersonate legitimate users and perform account takeover. The ...
CVE-2025-69101 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
WordPress plugin Workreap Core has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-4171
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreap core allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.0...
WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by NAWardRox in WordPress Plugin Workreap Core versions = 3.4.1...
CVE-2025-22728
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728
CVE-2025-22728 is an authenticated SQL injection in the Workreap plugin/theme for WordPress (
CVE-2025-22728 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...