workreap
Security Risk Profile
64
/100
highSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 12, 2025 to present
3
Total CVEs
3
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
9.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
64/100
high
Severity Distribution
Critical
2High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Malicious File Upload
1
Most Affected Products
1. Amentotech Workreap Wordpress3
2. Workreap Workreap plugin for WordPress2
3. Workreap Workreap1
Recent Vulnerabilities
See more →CVE-2025-4973
CVSS 9.8EPSS 0%critical
Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'
6/12/2025🔧 No Patch
CVE-2025-5012
CVSS 8.8EPSS 0%high
Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'
6/12/2025🔧 No Patch
CVE-2024-13446
CVSS 9.8critical
Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover
3/12/2025🔧 No Patch
Monitor workreap in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.