CVE-2023-31237: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9...

PT-2023-23258 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions n/a through 3.3.9 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the Zephyr Project Manager, allowing...

WordPress Plugin Zephyr Project Manager Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

CVE-2023-34373

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Project Manager plugin = 3.3.93 versions...

CVE-2023-34373

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Project Manager plugin = 3.3.93 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Project Manager plugin = 3.3.93 versions...

CVE-2023-34373 WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Project Manager plugin = 3.3.93 versions...

CVE-2023-34373 WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Project Manager plugin = 3.3.93 versions...

CVE-2023-34373

CVE-2023-34373 affects the Zephyr Project Manager WordPress plugin (versions ≤ 3.3.93). The issue is a Cross-Site Request Forgery (CSRF) vulnerability that could allow unauthenticated or authenticated attackers to induce unwanted actions (e.g., data deletion) due to missing CSRF checks. A fix is ...

PT-2023-24846 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Dylan James Zephyr Project Manager plugin versions = 3.3.93 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...

CVE-2023-34373: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Dylan James Zephyr Project Manager plugin = 3.3.93 versions...

WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)

Software Zephyr Project Manager Type Plugin Vulnerable versions = 3.3.93 Fixed in 3.3.94 OWASP Top 10 A6: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-34373 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 598837ada134 Credits...

WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection

Software Zephyr Project Manager Type Plugin Vulnerable versions = 3.3.9 Fixed in 3.3.91 OWASP Top 10 A6: Security Misconfiguration Classification Open Redirection CVE CVE-2023-31237 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 0a67e197ec76 Credits Nguyen Xuan Chien...

WordPress Zephyr Project Manager 3.2.42 SQL Injection

Exploit Title: Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi Date: 14-08-2022 Exploit Author: Rizacan Tufan Blog Post: https://rizax.blog/blog/wordpress-plugin-zephyr-project-manager-multiple-sqli-authenticated Software Link: https://wordpress.org/plugins/zephyr-project-manager/...

Wordpress Zephyr Project Manager 3.2.42 Plugin - Multiple SQL injection Vulnerabilities

Exploit Title: Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi Exploit Author: Rizacan Tufan Blog Post: https://rizax.blog/blog/wordpress-plugin-zephyr-project-manager-multiple-sqli-authenticated Software Link: https://wordpress.org/plugins/zephyr-project-manager/ Vendor Homepage:...

Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi

Exploit Title: Wordpress Plugin Zephyr Project Manager 3.2.42 - Multiple SQLi Date: 14-08-2022 Exploit Author: Rizacan Tufan Blog Post: https://rizax.blog/blog/wordpress-plugin-zephyr-project-manager-multiple-sqli-authenticated Software Link: https://wordpress.org/plugins/zephyr-project-manager/...

CVE-2022-2839

The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them t...

Cross site scripting

The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them t...

CVE-2022-2839

The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them t...

CVE-2022-2839

CVE-2022-2839 affects the Zephyr Project Manager WordPress plugin prior to 3.2.55. The vulnerability stems from missing authorization and CSRF protection on all AJAX actions, enabling unauthenticated calls. Additionally, lack of input sanitisation/escaping could allow Stored XSS against logged-in...