Doccure Core vulnerabilities

2 known vulnerabilities in Doccure Core from Dreamstechnologies. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Doccure Core: Improper Privilege Management

  CVE-2025-8900Nov 3, 2025Dreamstechnologies

  The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'user_type' field. This makes i

• 9.8 Critical severity

  Doccure Core: Unrestricted Upload of File with Dangerous Type

  CVE-2025-9113Sep 8, 2025Dreamstechnologies

  The Doccure Core plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'doccure_temp_upload_to_media' function in all versions up to, and including, 1.5.3. This makes it possible for unauthenticated attackers t