CVE-2026-112822: WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreapcore allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Workreap Core pluginto a version that resolves this vulnerability.Fixed in 3.4.4
Event History
Frequently Asked Questions
Which installations should be treated as affected?
Workreap Core installations running a version earlier than 3.4.4 are affected. The affected product is identified as AmentoTech Workreap Core.
What access does an attacker need to exploit this issue?
The supplied vector indicates network reachability, low attack complexity, no user interaction, and low privileges required. Exploitation is described as blind SQL injection.
How can I determine whether my site is affected?
Check the installed Workreap Core plugin version. Versions before 3.4.4 should be considered affected; update to 3.4.4 or later.