https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5012.htmlhttps://patchthecve.com/cve/CVE-2025-5012.htmlWed, 17 Jun 2026 09:47:01 +0000HIGH 8.8: The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'workreap_temp_upload_to_media' function in all versions up to, and including, 3.3.2. This makes it possible for authenthttps://patchthecve.com/cve/CVE-2025-4973.htmlhttps://patchthecve.com/cve/CVE-2025-4973.htmlWed, 17 Jun 2026 09:34:25 +0000CRITICAL 9.8: The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1. This is due to the plugin not properly verifying a user's identity prior to logging them in when verifying an account whttps://patchthecve.com/cve/CVE-2024-13446.htmlhttps://patchthecve.com/cve/CVE-2024-13446.htmlWed, 17 Jun 2026 07:02:01 +0000CRITICAL 9.8: The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. This is due to the plugin not properly validating a user's identity prior to (1) performing a social auto-login or (2) updating their profile details (e.g. passwo