DirectoryThemes vulnerabilities
We track 2 vulnerabilities in DirectoryThemes products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 27, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest DirectoryThemes vulnerabilities
- 8.8 High severity
Tiger: Improper Privilege Management
The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the plugin allowing a user to update the user role through the $user->set_role() function. This makes it possible for authenticate
- 9.8 Critical severity
Tiger: Improper Privilege Management
The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated