Vulnerabilidades do AmentoTech Doctreat Core

Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers to register as an administrator user.