| Package | Affected versions | Patched versions |
|---|---|---|
| workreap | < 2.2.2 | 2.2.2 |
The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objects. This allowed a logged in user to modify or delete objects belonging to other users on the site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free