WordPress Tiger Theme Privilege Escalation Vulnerability
Vulnerability
A privilege escalation vulnerability has been identified in the Tiger theme for WordPress, affecting all versions through 101.2.1. The issue arises because the 'paypal-submit.php' file does not properly restrict the user roles that can be selected during registration. This flaw allows unauthenticated attackers to register for an account with the 'administrator' role, thereby gaining administrative access to the site.
Impact
Exploitation of this vulnerability allows unauthenticated users to gain administrator privileges on the affected WordPress site.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected theme.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.