PT Project Notebooks – Take Meeting minutes, create budgets, track task management, and more, CVE-2025-5304
- CVE, Research URL
- Home page URL
- Application
-
PT Project Notebooks – Take Meeting minutes, create budgets, track task management, and more
- Published on
- Jun 28, 2025
- Research Description
- The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
- Affected versions
-
Min -, max 1.0.0.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| WP Blog and Widgets (CVE-2022-4824) , Jun 07, 2024 |