2022-12-05 16:51:48
WPScan
PUBLISHED
The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as its possible to read any users notification (employer or freelancer) as the notification ID is brute-forceable.