← WordPress Vulnerabilities
WordPress security by component

Doctreat Core

Doctreat Core is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 10, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: doctreat-core

CVE-2025-6254: Doctreat Core: Privilege escalation or authentication bypass

Doctreat Core is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.6.8.

PublishedJun 10, 2026
Known safe version> 1.6.8
Safe version
Jun 10, 2026 CVE-2025-6254
Doctreat Core: Privilege escalation or authentication bypass
Doctreat Core is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.6.8.
> 1.6.8
CVE9.8
NVDPending