Access violation vulnerability in Agency Toolkit 1.0.23

The Agency Toolkit plugin for WordPress has a security issue that allows unauthorized changes to be made to its data. This can lead to a higher level of access being granted, even to unauthenticated attackers. The problem is due to a missing capability check on the ‘agency_toolkit_import’ action in all versions up to 1.0.23. This means that anyone can update certain settings on a WordPress site without being logged in. This could potentially give attackers the ability to change the default registration role to administrator and allow them to create new user accounts with administrative access.