Workreap - Freelance Marketplace and Directory WordPress Theme

Workreap - Freelance Marketplace and Directory WordPress Theme has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2022; all 5 are fixed as of September 2026. Their average CVSS score is 7.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2021 was the busiest year with 3 disclosures.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 2 of the records (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

Every one of the 5 issues recorded for Workreap - Freelance Marketplace and Directory WordPress Theme has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (3) reported by Harald Eilertsen.

Strategic Overview

Avg CVSSHigh

7.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Workreap - Freelance Marketplace and Directory WordPress Theme vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2021-24499

Workreap - Freelance Marketplace and Directory WordPress Theme < 2.2.2 - Arbitrary File Upload

Read the full analysis

Vulnerability Records

5 records


2022-12-02 00:00	Workreap <= 2.6.3 - Insecure Direct Object Reference Workreap - Freelance Marketplace… <= 2.6.3	`CVE-2022-4239`	5.4 Medium	Veshraj Ghimire	Yes
2022-11-12 00:00	Workreap < 2.6.3 - Insecure Direct Objection Reference to Private Message Disclosure Workreap - Freelance Marketplace… < 2.6.3	`CVE-2022-3846`	5.4 Medium	Veshraj Ghimire	Yes
2021-07-02 00:00	Workreap - Freelance Marketplace and Directory WordPress Theme < 2.2.2 - Arbitrary File Upload Workreap - Freelance Marketplace… < 2.2.2	`CVE-2021-24499`	9.8 Critical	Harald Eilertsen	Yes
2021-07-02 00:00	Workreap < 2.2.2 - Cross-Site Request Forgery Workreap - Freelance Marketplace… < 2.2.2	`CVE-2021-24500`	8.1 High	Harald Eilertsen	Yes
2021-06-29 00:00	Workreap Theme < 2.2.2 - Authorization Bypass Workreap - Freelance Marketplace… < 2.2.2	`CVE-2021-24501`	8.1 High	Harald Eilertsen	Yes

Showing 1–5 of 5 reports