---
id: "CVE-2026-112822"
kind: "vulnerability"
aliases: ["CVE-2026-112822"]
title: "Workreap Core WordPress plugin: blind SQL injection exposes database contents"
severity: "high"
cvss: 8.5
epss: 0.00289
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["marketplace-sites", "package", "wordpress", "workreap-core"]
not_affected_if: ["plugin-not-installed", "version-3.4.4-or-later"]
published_at: "2026-10-22T11:17:32+00:00"
first_seen_at: "2026-10-23T21:57:30+00:00"
updated_at: "2026-10-25T03:00:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112822", "first_seen_at": "2026-10-23T21:57:30+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-112822", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# Workreap Core WordPress plugin: blind SQL injection exposes database contents

Workreap Core, a WordPress plugin from AmentoTech, fails to neutralize special characters in an SQL query, so input reaches the database unescaped. An attacker can read data from the site's database one inference step at a time, which can include user records and password hashes.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Workreap Core plugin version in the WordPress admin plugins list or `wp plugin get workreap_core --field=version`
- unknown whether other check paths are needed

## Fix

- Update Workreap Core to `3.4.4` or later
- unknown whether a workaround exists before updating

## Timeline

- 2026-10-23T21:57:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112822
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-112822

## From the sources

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreap_core allows Blind SQL Injection.This issue affects Workreap Core: from n/a before 3.4.4.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_