An issue with WordPress directory names in WebPros WordPress Toolkit before 6.9.1 allows privilege escalation.