CVE-2025-6254

CVE-2025-6254 python exploit.py -u http://localhost:8080 python exploit.py -f targets.txt -T 50 -t 8 python exploit.py -f targets.txt -o sonuclar.txt --role editor CVE-2025-6254 - Doctreat Core = 1.6.8 Unauthenticated Privilege Escalation SADECE KENDİ TEST ORTAMINIZDA KULLANIN...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

CVE-2026-39770

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39773

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39773

The Doctreat Core plugin for WordPress (versions

CVE-2026-39773 WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

EUVD-2026-93023

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39773 WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39770 WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39770 WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39770

The Doctreat WordPress theme, version 1.7.0 and below , is vulnerable to an unauthenticated arbitrary file upload (CWE-434). This vulnerability allows an attacker to upload files with dangerous types to the server. The impact is rated as CRITICAL (CVSS 3.1 score of 10.0), potentially leading to h...

EUVD-2026-93277

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39773: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39770: Unrestricted Upload of File with Dangerous Type

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

PT-2026-106445

Name of the Vulnerable Software and Affected Versions Doctreat Core versions prior to 1.7.1 Description An issue allows unauthenticated users to perform privilege escalation, enabling them to gain higher access levels without providing valid credentials. Recommendations Update to a version newer...

PT-2026-106442

Name of the Vulnerable Software and Affected Versions Doctreat versions prior to 1.7.1 Description An unauthenticated arbitrary file upload issue exists in the Doctreat WordPress theme. This allows an attacker to upload files to the server without requiring authentication. Recommendations Update ...

WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Doctreat Core versions = 1.7.0...

WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jamaal ahmed in WordPress Theme Doctreat versions = 1.7.0...

CVE-2025-6254

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...

CVE-2025-6254

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...