Doccure Core WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Doccure Core plugin for WordPress, affecting versions prior to 1.5.4. The vulnerability arises because the plugin allows users registering new accounts to choose their own roles by using the 'user_type' field. This functionality can be exploited by unauthenticated attackers to create accounts with administrative privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to create accounts with administrator roles, thereby gaining elevated privileges on the WordPress site.

Remediation

Users are advised to update the Doccure Core WordPress plugin to version 1.5.4 or a newer patched version.