WordPress Tiger Theme Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the Tiger theme for WordPress, affecting all versions through 101.2.1. The issue arises because the theme allows users to modify their roles using the $user->set_role() function. This functionality can be exploited by authenticated users with Subscriber-level access or higher, enabling them to gain administrative privileges.

Impact

Exploitation of this vulnerability allows authenticated users with Subscriber-level access to elevate their privileges to that of an administrator.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected theme.