WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Zephyr Project Manager

Zephyr Project Manager is a modern, easy to use sophisticated project manager for WordPress.

20Reported vulnerabilities
9.8Highest CVSS score
3.3.205Latest version
1,000+Active installs

What to do now

Update Zephyr Project Manager to 3.3.204 or later. 20 of these have a fixed version available. Updating resolves them.

Plugin last updated: February 11, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-2840 Critical 9.8 10.5% Before 3.2.5 3.2.5 September 19, 2022
CVE-2024-6536 Medium 5.4 0.8% Before 3.3.99 3.3.99 July 30, 2024
CVE-2022-2839 Medium 5.4 0.4% Before 3.2.55 3.2.55 October 3, 2022
CVE-2024-37484 High 8.8 0.4% 3.3.97 and earlier 3.3.99 July 4, 2024
CVE-2024-7624 High 8.1 0.4% Before 3.3.102 3.3.102 August 15, 2024
WF-7082c181-88c7-40f0-b49c-ffc16ab41dcc High 7.2 — 3.2.4 and earlier
3.2.41 to 3.2.41 (inclusive)
3.2.42 to 3.2.42 (inclusive)		 3.2.5 August 29, 2022
CVE-2022-1822 Medium 6.1 1.1% Before 3.2.41 3.2.41 June 13, 2022
CVE-2025-32526 Medium 6.1 0.3% 3.3.101 and earlier 3.3.102 April 10, 2025
WF-2ff83bf5-369f-43b9-b073-daf0de9051c7 Medium 6.1 — Before 3.2.5 3.2.5 August 29, 2022
CVE-2024-43915 Medium 5.5 0.3% 3.3.102 and earlier 3.3.103 August 20, 2024
CVE-2024-7356 Medium 5.4 0.3% Before 3.3.101 3.3.101 August 3, 2024
CVE-2023-31237 Medium 5.4 0.4% 3.3.9 and earlier 3.3.10 April 27, 2023
CVE-2024-38761 Medium 5.3 0.4% 3.3.99 and earlier 3.3.100 July 12, 2024
CVE-2025-12496 Medium 4.9 0.7% 0 to 3.3.203 (inclusive) 3.3.204 December 17, 2025
CVE-2025-10490 Medium 4.4 0.2% 3.3.202 and earlier 3.3.203 September 25, 2025
CVE-2025-54714 Medium 4.3 0.2% 3.3.201 and earlier 3.3.202 August 26, 2025
CVE-2025-39552 Medium 4.3 0.3% 3.3.200 and earlier 3.3.201 April 16, 2025
CVE-2024-43916 Medium 4.3 0.3% 3.3.102 and earlier 3.3.103 August 20, 2024
CVE-2024-43322 Medium 4.3 0.4% 3.3.100 and earlier 3.3.101 August 16, 2024
CVE-2023-34373 Medium 4.3 0.2% 3.3.93 and earlier 3.3.94 June 13, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.