CVE-2025-6254

The flaw

The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the doctreat_process_registration() function not properly restricting the roles that a user can registe

What to do

Review advisory and patch per vendor guidance.

References