Doctreat Core
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-39773 | Cri | 0.65 | 10.0 | 0.00 | Oct 6, 2026 | Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions. | ||
| CVE-2025-6254 | Cri | 0.64 | 9.8 | 0.00 | Jun 10, 2026 | The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes it possible for… |
- risk 0.65cvss 10.0epss 0.00
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
- risk 0.64cvss 9.8epss 0.00
The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes it possible for…