PT Project Notebooks
PT Project Notebooks has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for PT Project Notebooks has a vendor fix available, so running the current release closes it.
All of these findings were reported by kr0d. PT Project Notebooks is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-5304PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function
Read the full analysisVulnerability Records

PT Project Notebooks
Author
Brent
PT Project Notebooks helps you run projects and events inside WordPress — take meeting minutes, track tasks, manage budgets, and publish notebooks to the front end for volunteers and stakeholders. Our core platform is free, flexible, and driven by its users. The freedom of open-source means you retain full ownership of your project’s content and data forever. Whether you’re organizing your own project, chairing a committee, or managing an event for your school, church, sports team, or any other organization type, use Project Notebooks for a project management tool that blends simplicity with detail. Take and manage unlimited meeting minutes Track important due dates and tasks that will auto-update based on your event date selection. Document general notes for the project itself Manage a budget with revenue and expense items Visually manage key steps with a Kanban board Keep key information at the top of your list with a dedicated informational board Post unlimited notebooks to the frontend – great for posting meeting minutes! Store attachments for your event and avoid the ‘we lost it!’ cry Built-in tools and a simple-to-use interface help you efficiently manage your next big project or event with ease. Transitioning the management of projects or committees from user to user is as easy as adding the new person as an administrator of the project – allowing users like Committee Chairs to easily pass their work on to the next chair. Only use the components you want when setting up a PT Project Notebook. Don’t over clutter your project with items that don’t make sense. Publish your PT Project Notebook to allow interested parties to see what is expected if they were to take over the project. Great for volunteer recruitment! Front-end editing access to make it as easy as possible for your PT Project Notebook managers. OWN AND CONTROL YOUR STORE DATA – FOREVER With Project Notebooks, your data belongs to you. Always. If you opt to share usage data with us, you can feel confident knowing that it’s anonymized and kept secure. Choose to opt-out at any time without impacting your store. Unlike hosted project and event management solutions, Project Notebooks data is future-proof; should you wish to migrate to a different platform, you’re free to export all your content and take your site wherever you choose. No restrictions.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C