Approved changes feed: RSS · Atom

cpe:2.3:a:blafoley:pt_project_notebooks_–_take_meeting_minutes,_create_budgets,_track_task_management,_and_more:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBlafoley (13ca347c-3d43-592c-9d92-e4ec53563939)
ProductPt Project Notebooks – Take Meeting Minutes, Create Budgets, Track Task Management, And More (37e3b997-c808-58dc-9311-e9850f3d8b67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5304 vulnerable 2026-06-08 07:35:24.606272 PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function
CRITICAL (9.8)
The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
Published: 2025-06-28T05:29:51.306Z
Updated: 2025-06-30T18:32:41.019Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.