CVE-2025-22728

Publication date

2026-01-08 09:17:40

Family

Patchstack

State

PUBLISHED

Description

Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in AmentoTech Workreap (themes plugin) workreap allows SQL Injection.This issue affects Workreap (themes plugin): from n/a through <= 3.3.6.