Approved changes feed: RSS · Atom

cpe:2.3:a:ptoffice:pt_project_notebooks:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorPtoffice (9cb36b4b-68bc-555f-9bee-ab31e1a96849)
ProductPt Project Notebooks (38dd8ef0-6ecc-52e8-a64f-88213c55ee85)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5304 vulnerable 2026-06-08 07:35:24.606873 PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function
CRITICAL (9.8)
The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
Published: 2025-06-28T05:29:51.306Z
Updated: 2025-06-30T18:32:41.019Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.