The Doctreat theme for WordPress includes an unauthenticated arbitrary file upload flaw that allows attackers to upload malicious files. This weakness is a direct vulnerability to code execution, as the uploaded files may be processed or executed by the site, enabling complete compromise of confidentiality, integrity, and availability of the affected WordPress installation.

The vulnerability affects the Doctreat theme version 1.7.0 and all earlier releases distributed by AmentoTech. The issue is limited to WordPress sites that have installed or are running these specific theme versions.

With a CVSS score of 10, the flaw is considered critical. The EPSS score is 0.00423, indicating a very low exploitation probability but not zero, so attackers may still target high‑value sites if they can leverage this specific flaw. The vulnerability is not listed in the CISA KEV catalog, and the lack of a public patch at the time of analysis does not reduce the risk. Attackers can exploit the flaw by issuing an HTTP file upload request without authentication, thereby placing malicious script or executable files on the server, leading to full system compromise.