CVE-2025-69101: WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability
Published Jan 22, 2026
·Updated
Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through <= 3.4.1.
Affected Software
1 affected component
Amentotech Workreap Core<=3.4.1
Event History
Jan 22, 2026
CVE Published
via MITRE·04:52 PM
Data Sourced
via MITRE·04:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-69101?
CVE-2025-69101 is considered a high severity vulnerability that can lead to account takeover.
2
How do I fix CVE-2025-69101?
To fix CVE-2025-69101, update the Workreap Core plugin to version 3.4.1 or higher.
3
What products are affected by CVE-2025-69101?
CVE-2025-69101 affects the AmentoTech Workreap Core plugin versions up to and including 3.4.0.
4
What type of vulnerability is CVE-2025-69101?
CVE-2025-69101 is an authentication bypass vulnerability that allows for authentication abuse.
5
Who is impacted by CVE-2025-69101?
Users of WordPress websites utilizing the vulnerable version of the Workreap Core plugin are impacted by CVE-2025-69101.