Dreamstechnologies

8 CVEs across 5 Dreamstechnologies products. Browse Dreamstechnologies vulnerabilities, severities, and proof-of-concept exploits.

Dreamstechnologies products with known CVEs

ProductCVEs
Doccure2
Doccure Core2
Truelysell Core2
Listee1
Mentoring1
Dreamstechnologies CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-13618Critical9.82026-05-05The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8. This is due to the plugin not properly re…
CVE-2025-12981Critical9.82026-02-27The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6. This is due to a broken validation check in t…
CVE-2025-8572Critical9.82026-02-14The Truelysell Core plugin for WordPress is vulnerable to privilege escalation in versions less than, or equal to, 1.8.7. This is due to insufficient validatio…
CVE-2025-8900Critical9.82025-11-03The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. This is due to the plugin allowing users w…
CVE-2025-10742Critical9.82025-10-16The Truelysell Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.8.6. This is due to the plugin pro…
CVE-2025-9114Critical9.82025-09-08The Doccure theme for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.5.0. This is due to the plugin providing us…
CVE-2025-9113Critical9.82025-09-08The Doccure Core plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'doccure_temp_upload_to_media' functio…
CVE-2025-9112High8.82025-09-08The Doccure theme for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'doccure_temp_file_uploader' function in a…