CVE-2025-5304

The CVE-2025-5304 entry concerns the PT Project Notebooks WordPress plugin. Affected versions are 1.0.0–1.1.3, with a root cause in the function wpnb_pto_new_users_add() that lacks proper authorization. This permits unauthenticated attackers to escalate privileges to Administrator. Multiple conne...