Description
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
Published: 2026-10-06
Score: 10 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Immediate Patch
AI Analysis

Impact

An unauthenticated user can exploit Doctreat Core versions 1.7.0 and earlier to obtain elevated privileges within the WordPress site. The flaw arises from improper privilege management (CWE-266), allowing attackers to bypass authentication controls and perform actions normally reserved for administrators, such as modifying plugin settings or accessing sensitive data.

Affected Systems

The vulnerability affects the AmentoTech Doctreat Core WordPress plugin in all released versions up to and including 1.7.0.

Risk and Exploitability

The CVSS score of 10.0 indicates critical severity, and the EPSS score is 0.288%, indicating an extremely low exploitation probability. The vulnerability is listed as not in the CISA KEV catalog, but the unauthenticated nature of the attack vector and the high impact make it a top priority for remediation. Attackers could use the web interface to trigger the privilege escalation without needing any credentials, making remote exploitation straightforward.

Generated by OpenCVE AI on October 7, 2026 at 05:52 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Doctreat Core to a version newer than 1.7.0 (e.g., 1.7.1 or later).
  • If the update cannot be applied immediately, deactivate or remove the plugin from the WordPress installation to block the vulnerable functionality.
  • Review any privileged functions the plugin offers and enforce proper permission checks to ensure that only authorized users can execute them.

Generated by OpenCVE AI on October 7, 2026 at 05:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 06 Oct 2026 22:00:00 +0000

Type Values Removed Values Added
First Time appeared Amentotech
Amentotech doctreat Core
Wordpress-extensions
Wordpress-extensions doctreat Core
Vendors & Products Amentotech
Amentotech doctreat Core
Wordpress-extensions
Wordpress-extensions doctreat Core

Tue, 06 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 06 Oct 2026 09:00:00 +0000

Type Values Removed Values Added
Description Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
Title WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability
Weaknesses CWE-266
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Amentotech Doctreat Core
Wordpress-extensions Doctreat Core
cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-10-06T10:31:35.630Z

Reserved: 2026-04-07T10:59:10.175Z

Link: CVE-2026-39773

cve-icon Vulnrichment

Updated: 2026-10-06T10:29:43.996Z

cve-icon NVD

Status : Deferred

Published: 2026-10-06T09:17:49.900

Modified: 2026-10-06T15:04:25.990

Link: CVE-2026-39773

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-07T06:00:08Z

Weaknesses
  • CWE-266

    Incorrect Privilege Assignment