Access violation vulnerability in Projectopia – WordPress Project Management 5.1.16

The Projectopia plugin for WordPress, which helps manage projects, has a security issue that allows unauthorized users to take over an account and gain access to sensitive information. This can happen because the plugin does not check a user’s identity before allowing them to change their email address. Attackers could exploit this vulnerability to change an administrator’s email and then reset their password, giving them access to the account.