Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

AmentoTech — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting AmentoTech. AI-powered Chinese analysis, POCs, and references for each vulnerability.

AmentoTech develops enterprise software solutions for supply chain management, with 12 CVEs recorded to date. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and access control weaknesses. While no major public security incidents have been documented, their vulnerability history suggests a pattern of security gaps in authentication mechanisms and secure coding practices. The company's products remain attractive targets due to their integration with critical business infrastructure, necessitating robust security measures to address recurring issues in input handling and session management.

CVE ID Title CVSS Severity Published
CVE-2025-6254 Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation — Doctreat Core CWE-269 9.8 Critical 2026-06-10
CVE-2025-69101 WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability — Workreap Core CWE-288 9.8 Critical 2026-01-22
CVE-2025-22728 WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability — Workreap (theme's plugin) CWE-89 8.5 High 2026-01-08
CVE-2025-64235 WordPress Tuturn plugin < 3.6 - Arbitrary File Download vulnerability — Tuturn CWE-22 6.5 Medium 2025-12-18
CVE-2025-64236 WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability — Tuturn CWE-288 9.8 Critical 2025-12-18
CVE-2025-59566 WordPress Workreap (theme's plugin) plugin <= 3.3.5 - Arbitrary File Deletion vulnerability — Workreap (theme's plugin) CWE-22 7.7 High 2025-10-22
CVE-2025-58971 WordPress Doctreat theme <= 1.6.7 - Cross Site Scripting (XSS) Vulnerability — Doctreat CWE-79 7.1 High 2025-10-22
CVE-2025-58970 WordPress Doctreat theme <= 1.6.7 - Content Injection vulnerability — Doctreat CWE-80 6.3 Medium 2025-10-22
CVE-2025-58959 WordPress Taskbot plugin <= 6.4 - Arbitrary File Deletion vulnerability — Taskbot CWE-22 7.7 High 2025-10-22
CVE-2025-4973 Workreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account' — Workreap CWE-288 9.8 Critical 2025-06-12
CVE-2025-5012 Workreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media' — Workreap CWE-434 8.8 High 2025-06-12
CVE-2025-31920 WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability — WP Guppy CWE-89 8.5 High 2025-06-09
CVE-2024-13446 Workreap <= 3.2.5 - Unauthenticated Privilege Escalation via Account Takeover — Workreap CWE-288 9.8 Critical 2025-03-12

This page lists every published CVE security advisory associated with AmentoTech. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.