CVE Catalog
CVE-2026-39759
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk0.48%
39th percentile - higher than 39% of all known CVEs
Summary
The vulnerability allows an employer or sales representative to perform arbitrary file upload in Workreap Core up to version 3.4.5.
Risk Assessment
An attacker can upload malicious files to the server, potentially leading to site takeover or execution of malicious code.
Recommendation
Update the Workreap Core plugin to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in Workreap Core
Original NVD description (English source)
Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS