Log in Start free

AmentoTech

Products

ProductCVEsExploitedLatest
Doctreat3–Oct 6, 2026
Taskbot3–Oct 6, 2026
Workreap3–Jun 12, 2025
Workreap Core3–Oct 22, 2026
Workreap (theme's plugin)2–Jan 8, 2026
Doctreat Core2–Oct 6, 2026
Tuturn2–Dec 18, 2025
WP Guppy1–Jun 9, 2025

Exploited and recent CVEs

  • CVE-2026-112822 High 8.5 WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerability 0.3%
  • CVE-2026-39773 Critical 10.0 WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-39770 Critical 10.0 WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2026-39759 Critical 9.9 WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2026-39757 Critical 9.9 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2026-39753 Critical 9.8 WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-6254 Critical 9.8 Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation 0.5%
  • CVE-2025-69101 Critical 9.8 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability 0.6%
  • CVE-2025-22728 High 8.5 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability 0.4%
  • CVE-2025-64235 Medium 6.5 WordPress Tuturn plugin < 3.6 - Arbitrary File Download vulnerability 0.4%
  • CVE-2025-64236 Critical 9.8 WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability 0.4%
  • CVE-2025-59566 High 7.7 WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2025-58971 High 7.1 WordPress Doctreat theme <= 1.6.7 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-58970 Medium 6.3 WordPress Doctreat theme <= 1.6.7 - Content Injection vulnerability 0.3%
  • CVE-2025-58959 High 7.7 WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2025-4973 Critical 9.8 Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' 0.5%
  • CVE-2025-5012 High 8.8 Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' 0.6%
  • CVE-2025-31920 High 8.5 WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability 0.4%
  • CVE-2024-13446 Critical 9.8 Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover 0.4%