VendorsZephyr-onezephyr_project_managerall versions
Vulnerabilities

Zephyr-one Zephyr Project Manager

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2022-2840
Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
Published 2022-09-19 · Modified
9.81 PoCEPSS 0.129
CVE-2024-43322
WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability
Published 2024-08-18 · Analyzed
9.8EPSS 0.004
CVE-2024-37484
WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability
Published 2024-07-09 · Analyzed
8.8EPSS 0.004
CVE-2024-7624
Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation
Published 2024-08-15 · Analyzed
8.1EPSS 0.004
CVE-2024-38761
WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability
Published 2024-08-01 · Analyzed
7.5EPSS 0.004
CVE-2025-32526
WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability
Published 2025-04-17 · Modified
7.1EPSS 0.003
CVE-2024-7356
Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter
Published 2024-08-03 · Analyzed
6.4EPSS 0.003
CVE-2024-43915
WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability
Published 2024-08-26 · Analyzed
5.5EPSS 0.003
CVE-2022-3333
Zephyr Project Manager REST Call cross site scripting
Published 2022-09-28 · Modified
5.4EPSS 0.005
CVE-2022-2839
Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS
Published 2022-10-03 · Modified
5.4EPSS 0.004