Smartypants SP Project & Document Manager Missing Authorization Vulnerability Allowing Access Control Exploitation

A missing authorization vulnerability has been identified in the Smartypants SP Project & Document Manager plugin for WordPress, affecting versions through 4.70. This vulnerability arises from incorrectly configured access control security levels, which can be exploited to perform actions without the necessary privileges.

Impact

Exploitation of this vulnerability could lead to broken access control, allowing users to perform actions or access resources that should be restricted.

Remediation

Users of the Smartypants SP Project & Document Manager plugin are advised to update to a version later than 4.70. For those seeking immediate protection, Patchstack offers a mitigation rule that can be applied until an official fix is available.