WordPress Hospital Doctor Directory Plugin Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability has been identified in the WordPress Hospital Doctor Directory plugin, specifically in versions through 1.3.9. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control over the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and potentially full control over the website.

Remediation

Patchstack has issued a mitigation rule to block attacks targeting this vulnerability. Users can activate this mitigation through Patchstack's services.

Added: Jan 22, 2026, 8:15 PM
Updated: Jan 22, 2026, 8:15 PM

Vulnerability Rating

Custom Algorithm
spread
1.6
impact
7.5
exploitability
5.4
remediation
7.9
relevance
2.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.