CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers to register as an administrator user.
Explanation of Vulnerability in Simple Terms
Doctreat Core versions 1.6.8 and earlier contain a privilege management flaw that allows unauthenticated attackers to gain full control of the application over the network. No user interaction or special configuration is required. An attacker can read, modify, or delete any data and disrupt service availability.
What an attacker can do
Read, modify, or delete any data; disrupt service availability; gain full administrative control.
Potential impact on your site
Complete compromise of the Doctreat Core installation and all data it manages.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
