PT-2025-43291 · WordPress · Amentotech Workreap

0Xd4Rk5Id3 · Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-59566

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AmentoTech Workreap (theme's plugin) versions through 3.3.5

Description A Path Traversal issue exists in AmentoTech Workreap (theme's plugin). This allows an attacker to potentially access files and directories outside of the intended restricted directory. The issue is due to improper limitation of a pathname.

Recommendations Update AmentoTech Workreap (theme's plugin) to a version greater than 3.3.5.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-59566

Affected Products

Amentotech Workreap

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-59566 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/workreap/vulnerability/wordpress-workreap-theme-s-plugin-plugin-3-3-5-arbitrary-file-deletion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/workreap/vulnerability/wordpress-workreap-theme-s-plugin-plugin-3-3-5-arbitrary-file-deletion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1981046891141091382 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/workreap/vulnerability/wordpress-workreap-theme-s-plugin-plugin-3-3-5-arbitrary-file-deletion-vulnerability · Note