EUVD-2026-93277
GHSA-4w56-4p28-p3wf
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Unauthenticated remote upload needing no interaction gives AV:N/AC:L/PR:N/UI:N; resulting code execution compromises the host within its own security scope, so S:U with C/I/A all High (9.8).
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
2DescriptionCVE.org
Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
AnalysisAI
Unauthenticated arbitrary file upload in the Doctreat WordPress theme (versions up to and including 1.7.0) allows remote attackers to upload and execute malicious files, potentially leading to complete site takeover. The flaw requires no authentication or user interaction and affects only sites running this specific commercial Amentotech theme. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions beyond having the Doctreat WordPress theme (version 1.7.0 or earlier) installed and active on an internet-reachable WordPress site - the CVSS vector (AV:N/AC:L/PR:N/UI:N) and the 'Unauthenticated' description confirm remote, unauthenticated exploitation against default configurations with no user interaction. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | All available severity signals point in the same direction: the Patchstack-assigned CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) describes a network-reachable, low-complexity, fully unauthenticated flaw requiring no user interaction, and CWE-434 (arbitrary file upload) in a PHP/WordPress context typically yields remote code execution - hence the 10.0 rating (the perfect score is driven by Patchstack's Scope:Changed choice). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified in the available data at the time of analysis; consult the Patchstack advisory (https://patchstack.com/database/wordpress/theme/doctreat/vulnerability/wordpress-doctreat-theme-1-7-0-arbitrary-file-upload-vulnerability?_s_id=cve) for any updated guidance. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all WordPress sites for the Amentotech Doctreat theme at versions up to and including 1.7.0, take affected sites offline or disable the theme, and deploy WAF rules to block arbitrary file uploads to Doctreat theme paths. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Wordpress Theme
View allThe Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the news
The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and in
A vulnerability in posimyththemes Nexter nexter.0.3. Rated high severity (CVSS 8.5), this vulnerability is remotely expl
The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Acti
Remote code execution in the dmcwebzone Airin Blog WordPress plugin (versions up to and including 1.6.1) is possible thr
Unauthenticated arbitrary file upload in the Clanora WordPress theme (versions before 1.3.1) allows remote attackers to
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS. Rated medium severity (CVSS 6.1), thi
Arbitrary file upload in the CMSSuperHeroes Wastia WordPress theme (all versions before 1.1.3) allows remote attackers t
Unrestricted Upload of File with Dangerous Type vulnerability in EPC AI Hub allows Upload a Web Shell to a Web Server.3.
Backdoor / malicious code implant in the Silk Themes 'Newspapers X' WordPress theme (versions 1.0.46 through 1.0.48) all
Critical unrestricted file upload vulnerability in NasaTheme Flozen that allows unauthenticated remote attackers to uplo
Remote code execution in LogisticsHub WordPress theme allows unauthenticated attackers to upload arbitrary files, includ
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today