The Doccure Core plugin for WordPress contains a critical privilege escalation vulnerability in versions prior to 1.5.4. This flaw allows unauthenticated users registering new accounts to specify their user role via the 'user_type' field, enabling them to assign themselves administrator privileges.