CVE-2025-6813

🗓️ 18 Jul 2025 04:23:00Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 16 Views

CVE-2025-6813 aapanel WP Toolkit has a privilege escalation vulnerability in auto_login function.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-6813	18 Jul 202506:30	–	circl
CNNVD	WordPress plugin aapanel WP Toolkit 安全漏洞	18 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-6813 aapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function	18 Jul 202504:23	–	cvelist
EUVD	EUVD-2025-21842	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6813	18 Jul 202505:15	–	nvd
Patchstack	WordPress aapanel WP Toolkit plugin 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function vulnerability	18 Jul 202504:07	–	patchstack
Positive Technologies	PT-2025-29990 · WordPress · Aapanel Wp Toolkit	18 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6813	20 Jul 202504:45	–	redhatcve
Vulnrichment	CVE-2025-6813 aapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function	18 Jul 202504:23	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)	24 Jul 202514:26	–	wordfence

Vulners

Node

aapanel aapanel_wp_toolkitRange1.0–1.1wordpress

[
  {
    "vendor": "aapanel",
    "product": "aapanel WP Toolkit",
    "versions": [
      {
        "version": "1.0",
        "status": "affected",
        "lessThanOrEqual": "1.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/aapanel-wp-toolkit/
plugins	www.plugins.trac.wordpress.org/browser/aapanel-wp-toolkit/tags/1.1/includes/class-aapanel-wp-toolkit-agent.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/430a0b93-2cb7-45bf-86ac-4a8b3a0be77a

15 Apr 2026 00:35Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.8

EPSS0.00241

SSVC

CWE-862

cve-2025-6813 vulnerability privilege escalation wp toolkit auto login