Detections
Analytics
CVE-2025-6813
high
Description
The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within the auto_login() function in versions 1.0 to 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to bypass all role checks and gain full admin privileges.
References
https://wordpress.org/plugins/aapanel-wp-toolkit/#developers