Access violation vulnerability in Progress Planner 1.8.0

The Progress Planner plugin for WordPress has a security issue that allows unauthorized changes to be made to the data. This could potentially lead to someone gaining higher privileges. This vulnerability is caused by a missing check in the handle_interactive_task_submit() function in all versions up to and including 1.8.0. Attackers who are logged in with at least Subscriber-level access can exploit this and change certain settings on the WordPress site. This could potentially allow them to change the default role for user registration to administrator and allow them to register as an administrative user, giving them full control over the site.