Access violation vulnerability in Zephyr Project Manager 3.3.97

The Zephyr Project Manager plugin for WordPress has a security vulnerability that could potentially allow unauthorized users to gain administrator access. This vulnerability affects all versions up to 3.3.97. The issue occurs because the plugin does not properly check for changes made to user profiles through the update_user_meta function. As a result, attackers with subscriber-level access or higher could exploit this vulnerability to update their own user profiles and gain administrator privileges.