{"id":"CVE-2026-39773","published":"2026-10-06T09:17:49.900","lastModified":"2026-10-06T15:04:25.990","description":"Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/doctreat_core/vulnerability/wordpress-doctreat-core-plugin-1-7-0-privilege-escalation-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows unauthenticated users to escalate privileges in Doctreat Core versions 1.7.0 and earlier, enabling unauthorized access and control over the system.","exploitability":"Exploitation is straightforward as no authentication is required, and the vulnerability can be triggered remotely.","blast_radius":"If exploited, this could lead to complete system compromise, allowing attackers to perform any action and access sensitive data.","remediation":"Upgrade to Doctreat Core 1.8.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","priv-escalation","web","unauth"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:42:44.941Z"}}