CVE-2026-112822

LOWCVSS 8.5 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreap_core allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/workreap_core/vulnerability/wordpress-workreap-core-plugin-3-4-4-sql-injection-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

VulDB 🛡@vuldb21h
🚨 Our CTI team identified a lot of activities targeting AmentoTech Workreap Core Plugin (CVE-2026-112822) vuldb.com/vuln/425290/cti https://t.co/UGgaNrhUGY
0000075
2.3K followersView on X

Explore more

Back to dashboard