Access violation vulnerability in Zephyr Project Manager 3.3.102

The Zephyr Project Manager plugin for WordPress has a security issue that allows unauthorized changes to be made to data. This is because the plugin does not check for the proper permissions when using the ‘create_status,’ ‘update_status,’ and ‘delete_status’ functions. This vulnerability exists in all versions up to and including 3.3.102, which means that attackers who have at least Subscriber-level access can modify statuses without permission.