The Doccure Core plugin for WordPress is subject to a critical privilege escalation vulnerability that allows unauthenticated attackers to gain full administrative control.

This flaw is caused by improper privilege management where the user registration process fails to validate the user_type field. Unauthenticated attackers can exploit this by specifying elevated roles during account creation to achieve full administrative access.

Successful exploitation grants an attacker complete control over the WordPress environment, leading to full data compromise, unauthorized modification of site content, and potential remote code execution via plugin or theme management. With a CVSS score of 9.8, this vulnerability represents a critical risk to business continuity and data integrity.

Immediate Action: Update the Doccure Core plugin to version 1.5.4 or later immediately to close the registration loophole.

Proactive Monitoring: Review user account creation logs for suspicious administrative account registrations and monitor for unauthorized changes to system settings.

Compensating Controls: If immediate patching is not feasible, implement a Web Application Firewall (WAF) rule to block requests to registration endpoints containing unauthorized parameters or unexpected role assignments.

Public Exploit Available: Unknown

Given the critical severity of this privilege escalation vulnerability, administrators must prioritize the update to version 1.5.4. Failure to patch allows any external actor to compromise the entire site, rendering all other security controls ineffective once an administrative session is established.