Dylanjkotze vulnerabilities

Products

• Zephyr Project Manager 20
• Zephyr Project Manager 2

Newest

• dylanjkotze zephyr project manager Zephyr Project Manager <= 3.3.209 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'zpm_profile_picture' Parameter CVE-2026-120514 5.4 MediumNovember 7, 2026
• dylanjkotze zephyr project manager Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameter CVE-2026-76931 6.4 MediumSeptember 8, 2026
• dylanjkotze zephyr project manager Zephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery CVE-2025-12496 4.9 MediumDecember 17, 2025
• dylanjkotze zephyr project manager Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2025-10490 4.4 MediumSeptember 26, 2025
• dylan james zephyr project manager WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability CVE-2025-54714 7.1 HighAugust 28, 2025
• dylan james zephyr project manager WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability CVE-2025-32526 7.1 HighApril 17, 2025
• dylan james zephyr project manager WordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control Vulnerability CVE-2025-39552 5.4 MediumApril 16, 2025
• dylan james zephyr project manager WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability CVE-2024-43915 5.5 MediumAugust 26, 2024
• dylan james zephyr project manager WordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-43916 4.3 MediumAugust 26, 2024
• dylan james zephyr project manager WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-43322 5.4 MediumAugust 18, 2024
• dylanjkotze zephyr project manager Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation CVE-2024-7624 8.1 HighAugust 15, 2024
• dylanjames zephyr project manager Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter CVE-2024-7356 6.4 MediumAugust 3, 2024
• dylan james zephyr project manager WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability CVE-2024-38761 7.5 HighAugust 1, 2024
• dylanjames zephyr project manager Zephyr Project Manager < 3.3.99 - Editor+ XSS CVE-2024-6536 Public exploit 5.4 MediumJuly 30, 2024
• dylan james zephyr project manager WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability CVE-2024-37484 8.8 HighJuly 9, 2024
• dylan james zephyr project manager, zephyr project manager project project manager +1 more WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection CVE-2023-31237 4.7 MediumDecember 29, 2023
• dylan james zephyr project manager, zephyr project manager project project manager +1 more WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-34373 5.4 MediumJune 19, 2023
• dylanjkotze zephyr project manager Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS CVE-2022-2839 5.4 MediumOctober 3, 2022
• dylanjkotze zephyr project manager Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi CVE-2022-2840 Public exploit EPSS 13.2% 9.8 CriticalSeptember 19, 2022
• dylanjkotze zephyr project manager, zephyr project manager project project manager +1 more Zephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting CVE-2022-1822 6.1 MediumJune 13, 2022