A vulnerability was found in Doccure Plugin up to 1.4.8 on WordPress. It has been classified as critical. The impacted element is the function doccure_temp_upload_to_media. Performing manipulation results in unrestricted upload.

This vulnerability is known as CVE-2025-9113. Remote exploitation of the attack is possible. No exploit is available.