WordPress plugin Zephyr Project Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... A security vulnerability...

WordPress plugin Zephyr Project Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-30776 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions 3.3.1 through 3.3.102 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in the Zephyr Project Manager. This vulnerability allows for unauthorized access...

WordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Zephyr Project Manager versions = 3.3.102...

WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Zephyr Project Manager versions = 3.3.102...

WordPress Zephyr Project Manager Plugin <= 3.3.102 is vulnerable to Insecure Direct Object References (IDOR)

Software Zephyr Project Manager Type Plugin Vulnerable versions = 3.3.102 Fixed in 3.3.103 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-43916 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 104ce6eeba62 Credits...

CVE-2024-43322

Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100...

CVE-2024-43322

Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100...

CVE-2024-43322 WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100...

CVE-2024-43322 WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100...

CVE-2024-43322

CVE-2024-43322 is an Authorization Bypass Through User-Controlled Key affecting Zephyr Project Manager (versions up to 3.3.100, vendor not specified in Initial). The vulnerability has a high impact per CVSS v3.1 (Critical, 9.8) with network attack vector, no user interaction required, and high co...

PT-2024-30489 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions n/a through 3.3.100 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in the Zephyr Project Manager. This allows for potential unauthorized access. The...

WordPress plugin Zephyr Project Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Zephyr Project Manager plugin <=3.3.100 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Zephyr Project Manager versions = 3.3.100...

WordPress Zephyr Project Manager Plugin <=3.3.100 is vulnerable to Insecure Direct Object References (IDOR)

Software Zephyr Project Manager Type Plugin Vulnerable versions =3.3.100 Fixed in 3.3.101 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-43322 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 9361097ccda0 Credits...

CVE-2024-7624

The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the plugin not properly checking a users capabilities before allowing them to enable access to the plugin's settings through the...

CVE-2024-7624 Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the plugin not properly checking a users capabilities before allowing them to enable access to the plugin's settings through the...

CVE-2024-7624 Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the plugin not properly checking a users capabilities before allowing them to enable access to the plugin's settings through the...

CVE-2024-7624

CVE-2024-7624 affects the Zephyr Project Manager WordPress plugin. Versions up to 3.3.101 are vulnerable to limited privilege escalation due to update_user_access() not properly checking user capabilities, enabling authenticated users with subscriber-level access and above to grant themselves ful...

PT-2024-38460 · WordPress · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager plugin for WordPress versions up to, and including, 3.3.101 Description: The issue is related to limited privilege escalation due to the plugin not properly checking a user's capabilities before allowing them to enable...