Skip to content
OpenAdvisories

Product · Alex Tselegidis

plainpad

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-42562

    Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control)

    Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/users/{id}. The endpoint directly persists the admin attribute …

    Alex Tselegidis plainpad