CVE-2026-39759
Received Received - Intake

Employer Arbitrary File Upload in Workreap Core

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: Patchstack

Description
Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-39759
EUVD
EUVD-2026-93268

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
AmentoTech Workreap Core n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Arbitrary File Upload flaw in the WordPress Workreap Core Plugin versions 3.4.5 and below. It allows attackers to upload malicious files to the server, which could lead to a full system takeover. The vulnerability has a high CVSS score of 9.9, indicating severe risk.

Detection Guidance

Detecting this vulnerability requires checking if the Workreap Core plugin version 3.4.5 or below is installed on your WordPress site. Inspect plugin files for suspicious uploads or unauthorized file modifications. No specific commands are provided in the context.

Impact Analysis

This vulnerability can allow attackers to upload malicious files to your server, potentially leading to a full system compromise. It may be used in mass-exploitation campaigns targeting many websites. Immediate action is advised to mitigate the risk.

Mitigation Strategies

Immediately update the Workreap Core plugin to the latest version if available. If no patch exists, apply Patchstack's mitigation rule to block attacks. Contact your hosting provider or developer for assistance. Remove any suspicious files uploaded by attackers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-39759. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart