Login Request a demo
ZP
Product
Zephyr Project Manager
by Dylan James · last CVE Aug 28, 2025
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 5Medium 4Low 0
Severity
All severities10Critical1High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zephyr Project Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43322
9.8
0%
Aug 18
WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 3.3.100
CVE-2024-37484
8.8
0%
Jul 9
WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability
Affected: through 3.3.97
CVE-2023-34373
8.8
0%
Jun 19
WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 3.3.93
CVE-2024-38761
7.5
0%
Aug 1
WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability
Affected: through 3.3.99
CVE-2025-54714
7.1
0%
Aug 28
WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability
Affected: through 3.3.201
CVE-2024-43916
7.1
0%
Aug 26
WordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 3.3.102
CVE-2025-32526
6.1
0%
Apr 17
WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.3.101
CVE-2023-31237
6.1
0%
Dec 29
WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection
Affected: through 3.3.9
CVE-2025-39552
5.4
0%
Apr 16
WordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control Vulnerability
Affected: through 3.3.200
CVE-2024-43915
5.4
0%
Aug 26
WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability
Affected: through .3.102
Showing 10