CVE 7.1 HIGH

WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability_CVE-2025-54714

7.1 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Description

Missing Authorization vulnerability in Dylan James Zephyr Project Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zephyr Project Manager: from n/a through 3.3.201.

Basic Information

ID CVE-2025-54714
Source Patchstack
Published Aug 28, 2025 at 12:37

Affected Product

Vendor Dylan James
Product Zephyr Project Manager
Version n/a
Affected Versions Dylan James Zephyr Project Manager n/a

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.