CVE Intelligence

AmentoTech Doctreat vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AmentoTech Doctreat: 3 record(s), with affected versions and fixes.

CVE-2026-39770 Critical · 10.0 CWE-434 Oct 6, 2026
WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
CVE-2025-58971 High · 7.1 CWE-79 Oct 22, 2025
WordPress Doctreat theme <= 1.6.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AmentoTech Doctreat doctreat allows Reflected XSS.This issue affects Doctreat: from n/a through <= 1.6.7.
CVE-2025-58970 Medium · 6.3 CWE-80 Oct 22, 2025
WordPress Doctreat theme <= 1.6.7 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in AmentoTech Doctreat doctreat allows Code Injection.This issue affects Doctreat: from n/a through <= 1.6.7.