Dreamstechnologies
8 CVEs across 5 Dreamstechnologies products. Browse Dreamstechnologies vulnerabilities, severities, and proof-of-concept exploits.
Dreamstechnologies products with known CVEs
Dreamstechnologies CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-13618 | Critical | 9.8 | 2026-05-05 | The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8. This is due to the plugin not properly re… |
CVE-2025-12981 | Critical | 9.8 | 2026-02-27 | The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6. This is due to a broken validation check in t… |
CVE-2025-8572 | Critical | 9.8 | 2026-02-14 | The Truelysell Core plugin for WordPress is vulnerable to privilege escalation in versions less than, or equal to, 1.8.7. This is due to insufficient validatio… |
CVE-2025-8900 | Critical | 9.8 | 2025-11-03 | The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. This is due to the plugin allowing users w… |
CVE-2025-10742 | Critical | 9.8 | 2025-10-16 | The Truelysell Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.8.6. This is due to the plugin pro… |
CVE-2025-9114 | Critical | 9.8 | 2025-09-08 | The Doccure theme for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.5.0. This is due to the plugin providing us… |
CVE-2025-9113 | Critical | 9.8 | 2025-09-08 | The Doccure Core plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'doccure_temp_upload_to_media' functio… |
CVE-2025-9112 | High | 8.8 | 2025-09-08 | The Doccure theme for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'doccure_temp_file_uploader' function in a… |