These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A critical vulnerability was discovered in the Doctreat Core plugin for WordPress, affecting all versions up to and including 1.6.8. This vulnerability allows unauthenticated attackers to register as an administrator user due to the doctreat_process_registration() function not properly restricting the roles that a user can register with.
AmentoTech Workreap theme's plugin is vulnerable to SQL Injection, affecting versions from n/a through <= 3.3.6. This issue allows attackers to inject malicious SQL code, potentially leading to unauthorized data access or modification. Defenders should assess exposure and prioritize remediation. The vulnerability's impact on database security is significant, and verifying exposure and assessing potential [truncated]