CVE-2025-8900

The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'usertype' field. This makes it possible for unauthenticated attacke...

CVE-2025-8900

creationtimestamp| type| source ---|---|--- 2025-11-03 16:10:17+00:00| seen| https://gist.github.com/Darkcrai86/af888baaba66532a8f0c0f26e3f18f80 2025-11-03 16:41:54+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qhkaaocsk2 2025-11-03 17:45:31+00:00| seen|...

CVE-2025-8900

The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'usertype' field. This makes it possible for unauthenticated attacke...