Workreap

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-5012 HIGH This Week

A file upload vulnerability in all (CVSS 8.8). High severity vulnerability requiring prompt remediation.

WordPress RCE Workreap PHP

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2025-4973 CRITICAL Act Now

A authentication bypass vulnerability in all (CVSS 9.8). Critical severity with potential for significant impact on affected systems.

WordPress Authentication Bypass PHP Workreap

NVD

CVSS 3.1

9.8

EPSS

0.6%

CVE-2024-13446 CRITICAL Act Now

The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Workreap

NVD

CVSS 3.1

9.8

EPSS

0.6%

CVE-2025-5012

EPSS 1% CVSS 8.8

HIGH This Week

A file upload vulnerability in all (CVSS 8.8). High severity vulnerability requiring prompt remediation.

WordPress RCE Workreap +1

NVD

CVE-2025-4973

EPSS 1% CVSS 9.8

CRITICAL Act Now

A authentication bypass vulnerability in all (CVSS 9.8). Critical severity with potential for significant impact on affected systems.

WordPress Authentication Bypass PHP +1

NVD

CVE-2024-13446

EPSS 1% CVSS 9.8

CRITICAL Act Now

WordPress Privilege Escalation Workreap

NVD