A critical privilege-escalation flaw in the Doctreat Core WordPress plugin lets unauthenticated attackers register themselves as administrators on affected sites.
What Is It
CVE-2025-6254 is a privilege-escalation vulnerability (CWE-269: Improper Privilege Management) in the Doctreat Core plugin for WordPress. The flaw lies in the plugin's doctreat_process_registration() function, which fails to properly restrict the roles a user can choose during registration. As a result, an unauthenticated attacker can submit a registration request specifying the administrator role and obtain full administrative access to the site.
Why It Matters
The vulnerability carries a CVSS 3.1 base score of 9.8 (Critical) with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. It is remotely exploitable over the network, requires no authentication, no privileges, and no user interaction, while delivering high impact to confidentiality, integrity, and availability. Gaining an administrator account effectively means full control of the WordPress installation; attackers could modify content, install malicious code, exfiltrate data, or take the site offline. No CISA KEV entry was supplied, so there is no confirmation of active exploitation at this time.
What's Vulnerable
All versions of the Doctreat Core plugin up to and including 1.6.8 are affected. The plugin ships with the Doctreat doctors-directory WordPress theme. The supplied NVD record lists no specific affected CPEs.
Patch Status
No patch version or remediation guidance is included in the supplied source material, and no CISA-required action was provided. Administrators running Doctreat Core 1.6.8 or earlier should consult the vendor and Wordfence advisory references below for fixed-version and mitigation details.
Sources
- NVD, CVE-2025-6254: https://nvd.nist.gov/vuln/detail/CVE-2025-6254
- Wordfence Threat Intelligence: https://www.wordfence.com/threat-intel/vulnerabilities/id/5fa37909-932c-4879-bbf0-8b44cc995cc0?source=cve
- Doctreat theme (ThemeForest): https://themeforest.net/item/doctreat-doctors-directory-wordpress-theme/24867777