CVE-2022-3846

The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification (employer or freelancer) as the notification ID is brute-forceable.
Configurations

Configuration 1 (hide)

cpe:2.3:a:amentotech:workreap:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 07:20

Type Values Removed Values Added
New CVE

Information

Published : 2022-12-05 17:15

Updated : 2024-11-21 07:20


NVD link : CVE-2022-3846

Mitre link : CVE-2022-3846

CVE.ORG link : CVE-2022-3846


JSON object : View

Products Affected

amentotech

  • workreap
CWE

No CWE.