Pt Project Notebooks

1 CVEs product

Monthly

CVE-2025-5304 CRITICAL Act Now

The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

WordPress Privilege Escalation Authentication Bypass Pt Project Notebooks PHP
NVD
CVSS 3.1
9.8
EPSS
0.4%
CVE-2025-5304
EPSS 0% CVSS 9.8
CRITICAL Act Now

The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

WordPress Privilege Escalation Authentication Bypass +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy