Zephyr Project Manager

Vulnerabilities 25Slug zephyr-project-managerLatest version 3.3.205WordPress.org →

Minimum safe version

3.3.204

Update to 3.3.204 or later to address 25 fixable vulnerabilities

Latest available3.3.205 ✓
Medium 4.9
2025-12-17< 3.3.204

CVE-2025-12496

CVEWordfence
Medium 4.4
2025-09-26< 3.3.203

Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 5.4
2024-08-05< 3.3.101

WordPress Zephyr Project Manager Plugin <= 3.3.100 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence
N/A
< 3.2.5

Zephyr Project Manager &lt; 3.2.5 - Unauthorised REST Calls to Stored XSS

WPScan
N/A
< 3.2.5

Zephyr Project Manager &lt; 3.2.5 - Reflected Cross-Site Scripting

WPScan
N/A
2022-08-29< 3.2.5

Zephyr Project Manager <= 3.2.42 - Missing Authorization to Cross-Site Scripting

Wordfence
N/A
2022-08-29< 3.2.5

Zephyr Project Manager <= 3.2.42 - Reflected Cross-Site Scripting

Wordfence
Medium 5.4
2022-09-28< 3.2.5

CVE-2022-3333

CVE
N/A
2022-08-29< 3.2.5

WordPress Zephyr Project Manager plugin <= 3.2.42 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A
2022-08-29< 3.2.5

WordPress Zephyr Project Manager plugin <= 3.2.42 - Unauthorized REST Calls to Stored Cross-Site Scripting (XSS) vulnerability

Patchstack