The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification (employer or freelancer) as the notification ID is brute-forceable.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/6220c7ef-69a6-49c4-9c56-156b945446af | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/6220c7ef-69a6-49c4-9c56-156b945446af | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:20
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-05 17:15
Updated : 2024-11-21 07:20
NVD link : CVE-2022-3846
Mitre link : CVE-2022-3846
CVE.ORG link : CVE-2022-3846
JSON object : View
Products Affected
amentotech
- workreap
CWE
No CWE.