Workreap (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-12-26. Vendor: Unknown.

CVEs of Workreap

• CVE-2022-4239 - CVSS 6.5 (medium), 2022-12-26: The Workreap WordPress theme before 2.6.4 does not verify that an addon service belongs to the user issuing the request, or indeed that it is an addon…
• CVE-2022-3846 - CVSS 7.5 (high), 2022-12-05: The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification (employer or…
• CVE-2021-24500 - CVSS 8.1 (high), 2021-08-09: Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references…
• CVE-2021-24499 - CVSS 9.8 (critical), 2021-08-09: The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or…
• CVE-2021-24501 - CVSS 8.1 (high), 2021-08-09: The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical…