workreap_core vulnerabilities
CVEs whose affected-version data names the workreap_core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112822High· 8.5WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreap_core allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4.
▾ TwilightAmentoTech · workreap_coreEPSS 0.29%via CVEORG
CVE-2026-39759Critical· 9.9Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
▾ MidnightAmentoTech · workreap_coreEPSS 0.43%via NVD