PT-2026-48395 · WordPress · Doctreat Core

Friderika Baranyai · Published 2026-06-10 · Updated 2026-06-10 · CVE-2025-6254

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Doctreat Core plugin for WordPress versions prior to 1.6.9

Description The plugin is subject to privilege escalation because the doctreat process registration() function does not properly restrict the roles assigned during user registration. This allows unauthenticated attackers to register an account with administrator privileges.

Recommendations Update the plugin to a version later than 1.6.8. As a temporary workaround, restrict access to the registration functionality until the update is applied.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-6254

Affected Products

Doctreat Core

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-6254 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/5fa37909-932c-4879-bbf0-8b44cc995cc0?source=cve · Note
• https://twitter.com/OrizonCyber/status/2064656333362679809 · Twitter Post
• https://themeforest.net/item/doctreat-doctors-directory-wordpress-theme/24867777 · Note