Kirki Plugin Privilege Escalation - Patchstack

Fixed in 6.0.7. Mass-exploit campaign risk. 500K+ active installs. Wordfence blocked 222+ attempts in 24 hours.