Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2024-13446: Workreap plugin for WordPress allows attackers to take over any account
CVE-2024-13446 · published 1 year ago
Summary
The Workreap plugin for WordPress contains a security flaw that lets attackers take control of any user account, including administrator accounts, by exploiting a weakness in how the plugin handles user logins and profile updates. This can happen if an attacker knows the email address of a legitimate user. To stay safe, update the Workreap plugin to the latest version, 3.2.5 or later.
What to do
- Update amentotech workreap to version 3.2.6 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| amentotech | workreap |
< 3.2.6 cpe:2.3:a:amentotech:workreap:*:*:*:*:*:wordpress:*:* |
Original advisory text
The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. This is due to the plugin not properly validating a user's ...
The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.2.5. This is due to the plugin not properly validating a user's identity prior to (1) performing a social auto-login or (2) updating their profile details (e.g. password). This makes it possible for unauthenticated attackers to (1) login as an arbitrary user if their email address is known or (2) change an arbitrary user's password, including administrators, and leverage that to gain access to their account. NOTE: This vulnerability was partially fixed in version 3.2.5.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-288Authentication Bypass Using Alternate Path
Timeline
Published12 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-13446 · NVD
Track software like this
Free during beta