Skip to content
OpenAdvisories

Vendor

AmentoTech

19 known vulnerabilities.

Products

Taskbot 3 Workreap Core 3 Doctreat 3 Workreap 3 Workreap (theme's plugin) 2 Doctreat Core 2 Tuturn 2 WP Guppy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6254 Public exploit

    Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

    The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes …

    AmentoTech Doctreat Core Web / CMS