Privilege Escalation Vulnerability in Tiare Membership Plugin for WordPress

CVE-2025-13540

What is CVE-2025-13540?

The Tiare Membership plugin for WordPress has a vulnerability that allows privilege escalation due to improper role handling in the 'tiare_membership_init_rest_api_register' function. This weakness enables unauthenticated attackers to register with elevated rights by specifying the 'administrator' role, potentially compromising the entire website. It's essential for users of versions up to 1.2 to address this issue to prevent unauthorized access.

References