Vulnerability Report

CVE-2025-6254

Title: WordPress Doctreat Core Plugin Privilege Escalation

Auth Bypass

Proof Of Concept

PoC Available for CVE-2025-6254

CWE Category CWE-269

Published Date Jun 10, 2026

Modified Date Jun 10, 2026

Exploit Status Available

Score 9.8 CVSS v3.1

Exploit Probability (EPSS)

0.43%

Vulnerability Summary

CVE-2025-6254: The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can register with. This makes it possible for unauthenticated attackers to register as an administrator user.

Impacted Vendors

Analysis in Progress...

Reference Links

https://themeforest.net/item/doctreat-doctors-directory-wordpress-theme/24867777 https://www.wordfence.com/threat-intel/vulnerabilities/id/5fa37909-932c-4879-bbf0-8b44cc995cc0?source=cve

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

9.8

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2025-6254 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/xxconi/CVE-2025-6254

View Code

June 10, 2026 MODIFIED

Vulnerability data updated via NVD.

June 10, 2026 MODIFIED

Vulnerability data updated via NVD.

Attack Vector Matrix

Access Vector NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Stack

No specific products linked.