Critical · published November 3, 2025
🚨 A sneaky loophole in the Doccure Core plugin lets anyone create an admin account—no authentication needed! 🔥 Think of this as a hotel check-in desk that allows anyone to walk up and claim they’re the manager, bypassing all security checks to change reservations, access guest information, and more. This vulnerability hands over the keys to the kingdom with just a few keystrokes! An attacker could effortlessly register as an administrator, granting them unrestricted access to your WordPress site. This means they could alter settings, install malicious plugins, or even delete content—leaving your site vulnerable to chaos and disruption. It's absolutely devastating!
Think of this as a hotel check-in desk that allows anyone to walk up and claim they’re the manager, bypassing all security checks to change reservations, access guest information, and more. This vulnerability hands over the keys to the kingdom with just a few keystrokes! This privilege escalation vulnerability allows unauthenticated users to set their own account roles by manipulating the 'user_type' field during the registration process, effectively creating an admin account without any vetting.
An attacker could effortlessly register as an administrator, granting them unrestricted access to your WordPress site. This means they could alter settings, install malicious plugins, or even delete content—leaving your site vulnerable to chaos and disruption. It's absolutely devastating! Update the Doccure Core plugin to version 1.5.4 or later immediately to close this loophole. Additionally, review user roles and permissions to ensure that newly registered accounts do not have elevated privileges. You've got this! With these quick fixes, you'll have your site secured in no time! 🛡️