CVE-2025-13675

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13675", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-25T18:34:34.513Z", "datePublished": "2025-11-27T04:36:44.081Z", "dateUpdated": "2026-04-08T16:49:59.006Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:49:59.006Z"}, "affected": [{"vendor": "DirectoryThemes", "product": "Tiger", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "101.2.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site."}], "title": "Tiger <= 101.2.1 - Unauthenticated Privilege Escalation", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cve"}, {"url": "https://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-269 Improper Privilege Management", "cweId": "CWE-269", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Ismail Syaleh"}], "timeline": [{"time": "2025-11-26T16:19:43.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-28T14:42:06.966833Z", "id": "CVE-2025-13675", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-28T19:33:15.973Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-13675", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-28T14:42:06.966833Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-28T14:42:07.963Z"}}], "cna": {"title": "Tiger <= 101.2.1 - Unauthenticated Privilege Escalation", "credits": [{"lang": "en", "type": "finder", "value": "Ismail Syaleh"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "DirectoryThemes", "product": "Tiger", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "101.2.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-26T16:19:43.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cve"}, {"url": "https://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995"}], "descriptions": [{"lang": "en", "value": "The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:49:59.006Z"}}}, "cveMetadata": {"cveId": "CVE-2025-13675", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:49:59.006Z", "dateReserved": "2025-11-25T18:34:34.513Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-27T04:36:44.081Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Tiger", "vendor": "DirectoryThemes", "versions": [{"lessThanOrEqual": "101.2.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site."}, {"lang": "es", "value": "El tema Tiger para WordPress es vulnerable a la escalada de privilegios en todas las versiones hasta la 101.2.1, inclusive. Esto se debe a que el archivo 'paypal-submit.php' no restringe los roles de usuario con los que un usuario puede registrarse. Esto hace posible que atacantes no autenticados proporcionen el rol de 'administrador' durante el registro y obtengan acceso de administrador al sitio."}], "id": "CVE-2025-13675", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13675", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-28T14:42:06.966833Z", "version": "2.0.3"}}]}, "published": "2025-11-27T05:16:15.060", "references": [{"source": "security@wordfence.com", "url": "https://themeforest.net/item/tiger-social-network-theme-for-companies-professionals/16203995"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4750b57e-7d8d-49d7-bbbf-46483eb97bd9?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T01:16:56.058183+00:00", "value": {"mitigation_remediation": ["Upgrade the Tiger theme to the latest version that removes the role selection vulnerability once it is released.", "If an update is not immediately available, modify the theme\u2019s user registration mechanism to enforce a non-administrative role or disable role selection entirely.", "Use a web application firewall or security plugin to block or filter requests to paypal-submit.php from unauthenticated users.", "Monitor the WordPress admin area for new user accounts with elevated privileges and remove any unexpected administrator accounts."], "summary": {"action": "Immediate Patch", "impact": "Privilege Escalation"}, "threat_synthesis": {"affected_systems": "All versions of the Tiger theme for WordPress from the initial release up through and including 101.2.1 are affected. The theme is distributed via the WordPress theme marketplace and can be installed on any WordPress installation that supports the theme. No specific WordPress core versions are mentioned, so any site running these theme versions is at risk.", "description_and_impact": "The vulnerability arises because the Tiger theme\u2019s paypal-submit.php script does not validate the role assigned during user registration. An attacker can submit a registration form with the administrator role before any authentication is required, resulting in immediate administrative privileges on the WordPress site. The impact is full control over site content, settings, and data, leading to potential data theft, site defacement, or further compromise.", "risk_and_exploitability": "The CVSS score of 9.8 categorizes this as Critical, with the EPSS score indicating low current exploitation probability but not zero. Because the flaw allows unauthenticated privilege escalation through a publicly reachable form, the attack vector is a remote, unauthenticated web request. The vulnerability is not yet listed in the CISA KEV catalog, but its high severity warrants prompt remediation. Attackers could exploit this with minimal skill by submitting a crafted registration request directed at the paypal-submit.php endpoint."}}}}, "created": "2025-11-27T16:26:24.515821+00:00", "updated": "2026-04-21T01:30:24.384031+00:00", "vendors": ["directorythemes", "directorythemes$PRODUCT$tiger", "wordpress", "wordpress$PRODUCT$wordpress"]}