CVE-2025-6254

CVE-2025-6254 python exploit.py -u http://localhost:8080 python exploit.py -f targets.txt -T 50 -t 8 python exploit.py -f targets.txt -o sonuclar.txt --role editor CVE-2025-6254 - Doctreat Core = 1.6.8 Unauthenticated Privilege Escalation SADECE KENDİ TEST ORTAMINIZDA KULLANIN...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

CVE-2026-39773

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39773 WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

EUVD-2026-93023

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39773 WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39773

The Doctreat Core plugin for WordPress (versions

PT-2026-106445

Name of the Vulnerable Software and Affected Versions Doctreat Core versions prior to 1.7.1 Description An issue allows unauthenticated users to perform privilege escalation, enabling them to gain higher access levels without providing valid credentials. Recommendations Update to a version newer...

CVE-2026-39773: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Doctreat Core versions = 1.7.0...

CVE-2025-6254

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...

CVE-2025-6254

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...

WordPress Doctreat Core plugin <= 1.6.8 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Foxyyy in WordPress Plugin Doctreat Core versions = 1.6.8...

EUVD-2025-210104

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...

CVE-2025-6254 Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...

CVE-2025-6254 Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...

CVE-2025-6254

The Doctreat Core plugin for WordPress is affected up to version 1.6.8. The root cause is doctreat_process_registration() not properly restricting the roles a user can register with, enabling unauthenticated users to register as an administrator. This is a Privilege Escalation vulnerability. The ...

WordPress plugin Doctreat Core 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2025-6254: Improper Privilege Management

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreatprocessregistration function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers ...

PT-2026-48395

Name of the Vulnerable Software and Affected Versions Doctreat Core plugin for WordPress versions prior to 1.6.9 Description The plugin is subject to privilege escalation because the doctreat process registration function does not properly restrict the roles assigned during user registration. Thi...