Administrator account takeover via forged staff ownership

Privilege escalation in Dokan Pro 4.0.5 and earlier allows remote authenticated users with vendor access to take over administrator accounts. The Dokan_Staffs::handle_staff function accepts attacker-controlled staff ownership metadata, and dokan_get_current_user_id treats that value as the acting vendor during password changes. Vendor-level access is sufficient because customers can become vendors by default; the resulting administrator login grants full site control.