CVE-2025-8900

Name of the Vulnerable Software and Affected Versions Doccure Core plugin for WordPress versions prior to 1.5.4

Description The Doccure Core plugin for WordPress allows privilege escalation in versions prior to 1.5.4. This occurs because the plugin permits users creating new accounts to define their own role, specifically through the user type field. This enables unauthenticated attackers to obtain elevated privileges by registering an account with administrator rights.

Recommendations Update the Doccure Core plugin to version 1.5.4 or later.