Zephyr Project Manager vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ZP

Product

Zephyr Project Manager

by Dylan James · last CVE Aug 28, 2025

10

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 1High 5Medium 4Low 0

Severity

All severities10 Critical1 High5 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Zephyr Project Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-37484	8.8	0%	Jul 9	WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability Affected: through 3.3.97
CVE-2023-34373	8.8	0%	Jun 19	WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 3.3.93
CVE-2024-38761	7.5	0%	Aug 1	WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability Affected: through 3.3.99
CVE-2025-54714	7.1	0%	Aug 28	WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability Affected: through 3.3.201
CVE-2024-43916	7.1	0%	Aug 26	WordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.3.102