[NSFW] Security Issue Fix for PT Project Notebooks

Hello WordPress Plugin Review Team,

I am writing regarding the security closure of the PT Project Notebooks plugin. I have identified and fixed the issue that led to the closure.

Details of the fix:

Verified all nonce checks (wpnb_verify_nonce()) and ensured proper permission checks using current_user_can().

Validated and sanitized all input data (ids, user_type) using absint() and array_filter() to prevent injection or misuse.

Added checks to prevent role assignment to self and limit the number of users processed per request.

Ensured that all email notifications are sent securely only if the EmailTemplate class exists.

Included proper actions (do_action('wpnb_user_role_changed')) for auditing without exposing sensitive data.

Error messages now clearly indicate missing parameters, invalid user IDs, or invalid user types.

I have tested this thoroughly, and the plugin now adheres to WordPress security standards. I kindly request the plugin to be reviewed and reopened for public use.

Thank you for your time and support.

Best regards,

Brent Lafoly

The page I need help with: [log in to see the link]