118 matches found
CVE-2021-24499
CVE-2021-24499 CVE-2021-24499的大规模利用：Workreap主题中未经身份验证的上传导致远程代码执行。 AJAX操作workreapawardtempfileuploader和workreaptempfileuploader未执行nonce检查，也未以任何其他方式验证请求是否来自有效用户。这些端点允许将任意文件上传到uploads/workreap-temp目录。上传的文件既未经过清理也未经过验证，从而允许未经身份验证的访客上传可执行代码（如PHP脚本）。...
WordPress Workreap - Remote Code Execution
WordPress Workreap theme is susceptible to remote code execution. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to th...
CVE-2021-24499
CVE-2021-24499 大规模利用 CVE-2021-24499，未经身份验证的上传导致 Workreap 主题中的远程代码执行。 AJAX 操作 workreapawardtempfileuploader 和 workreaptempfileuploader 未执行 nonce 检查，也未以任何其他方式验证请求是否来自有效用户。这些端点允许将任意文件上传到 uploads/workreap-temp 目录。上传的文件既未经过净化也未进行验证，允许未经身份验证的访客上传可执行代码，例如 php 脚本。...
CVE-2021-24499
CVE-2021-24499 | Workreap - 自由职业者市场和目录 WordPress 主题 2.2.2 - 任意文件上传 WordPress 主题 Workreap 2.2.2 - 未认证文件上传导致远程代码执行 一个功能强大且精准的大规模利用工具，针对 WordPress Workreap 主题中的 CVE-2021-24499 漏洞。该利用程序允许未经认证的文件上传，从而可能导致远程代码执行（RCE）。 📝 描述 CVE-2021-24499 是 WordPress Workreap 主题（2.2.2 及以下版本）中的一个严重漏洞，它允许未经认证的用户通过...
Exploit for Unrestricted Upload of File with Dangerous Type in Amentotech Workreap
CVE-2021-24499 | Workreap - Freelance Marketplace and Director...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
CVE-2025-69101 describes an Authentication Bypass in the WordPress plugin Workreap Core (versions up to and including 3.4.0). The issue allows Authentication Abuse via an alternate path or channel, potentially enabling an attacker to impersonate legitimate users and perform account takeover. The ...
CVE-2025-69101 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
CVE-2025-69101
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.0...
CVE-2025-69101 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...
WordPress plugin Workreap Core has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-4171
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreap core allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.0...
WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by NAWardRox in WordPress Plugin Workreap Core versions = 3.4.1...
CVE-2025-22728
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728
CVE-2025-22728 is an authenticated SQL injection in the Workreap plugin/theme for WordPress (
CVE-2025-22728 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...
CVE-2025-22728 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AmentoTech Workreap theme's plugin workreap allows SQL Injection.This issue affects Workreap theme's plugin: from n/a through = 3.3.6...