https://cve.radiocsirt.org/rss/recent/all/10Most recent entries from all2026-10-05T21:01:00.779477+00:00Vulnerability-Lookupcsirt@opendfir.orgpython-feedgenContains only the most 10 recent entries.https://cve.radiocsirt.org/vuln/cve-2022-3846CVE-2022-3846 — Workreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR2026-10-05T21:01:00.795025+00:00
Affected: Unknown Workreap
The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read any user's notification (employer or freelancer) as the notification ID is brute-forceable.