p PatchFirst

CVE-2026-112822

CVE-2026-112822 · WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreap_core allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4.

CVSS 8.5 · High · EPSS 0.3% · Fix available

Published
Updated

Affected products and versions

  • workreap core

    Versions
    • ≥ 0, < 3.4.4: Affected; ≥ 3.4.4: Not affected (custom)

    Update to 3.4.4

Original sources

Check your server →