A vulnerability described as critical has been identified in Tiger Plugin up to 101.2.1 on WordPress. Affected is the function set_role. The manipulation results in privilege escalation.

This vulnerability was named CVE-2025-13680. The attack may be performed from remote. There is no available exploit.