Access violation vulnerability in aapanel WP Toolkit 1.1

The aapanel WP Toolkit plugin for WordPress has a security issue that allows attackers to gain higher privileges than they should have. This can happen because the plugin does not check for proper authorization in the auto_login() function, which is present in versions 1.0 to 1.1. As a result, attackers who are logged in with Subscriber-level access or higher can bypass role checks and gain full admin privileges.