Synergy Project Manager

Synergy Project Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Synergy Project Manager has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Drew Webber (mcdruid). The current release is tested up to WordPress 6.4.10.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Synergy Project Manager vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2025-68898

Synergy Project Manager <= 1.5 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-01-15 00:00	Synergy Project Manager <= 1.5 - Unauthenticated Stored Cross-Site Scripting Synergy Project Manager <= 1.5	`CVE-2025-68898`	7.2 High	Drew Webber (mcdruid)	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.5

Synergy Project Manager

Author

cjjparadoxmax

0.0(0)

0/100

Last Updated

2025-04-02 (2y ago)

Active Installs

Downloads

916

Requires WP

5.6+

Requires PHP

7.0+

Tested up to

WP 6.4.10

Created

2025-03-19 (2y ago)

更新日志： 2025.4.2 Update V1.4.1 1. 更新了插件名称 2025.4.2 Update V1.4 1. 新增了根据不同权限用户登录重定向至不同后台页面新增了香港中文语言包；新增了使用语言包的代码；新增了语言包使用的类方法。更新了爬虫 2025.4.2 Update V1.5 1. 更新了property_crawler.class.php , 修复了租售同盘,生成agent 选中agent作为author

View on WordPress.org