PT-2026-4171 · Amentotech · Workreap Core

Published 2026-01-22 · Updated 2026-01-22 · CVE-2025-69101

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AmentoTech Workreap Core versions through 3.4.0

Description An authentication bypass issue exists in AmentoTech Workreap Core workreap core, allowing authentication abuse. The issue involves bypassing normal authentication mechanisms through an alternate path or channel.

Recommendations Update Workreap Core to a version later than 3.4.0.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-69101

Affected Products

Workreap Core

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-69101 · Security Note
• https://twitter.com/CVEnew/status/2014391606842212641 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/workreap_core/vulnerability/wordpress-workreap-core-plugin-3-4-0-account-takeover-vulnerability?_s_id=cve · Note