CVE Intelligence

AmentoTech Doctreat Core vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AmentoTech Doctreat Core: 2 record(s), with affected versions and fixes.

CVE-2026-39773 Critical · 10.0 CWE-266 Oct 6, 2026
WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
CVE-2025-6254 Critical · 9.8 CWE-269 Jun 10, 2026
Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation
The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers to register as an administrator user.