Skip to contentDylanjkotze Zephyr Project Manager vulnerabilities
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.209 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'zpm_profile_picture' ParameterCVE-2026-1205145.4 Medium
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' ParameterCVE-2026-769316.4 Medium
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request ForgeryCVE-2025-124964.9 Medium
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-104904.4 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control VulnerabilityCVE-2025-547147.1 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-325267.1 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control VulnerabilityCVE-2025-395525.4 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-439155.5 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-439164.3 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-433225.4 Medium
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege EscalationCVE-2024-76248.1 High
- dylanjames zephyr project managerZephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename ParameterCVE-2024-73566.4 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerabilityCVE-2024-387617.5 High
- dylanjames zephyr project managerZephyr Project Manager < 3.3.99 - Editor+ XSSCVE-2024-6536Public exploit5.4 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerabilityCVE-2024-374848.8 High
- dylan james zephyr project manager, zephyr project manager project project manager +1 moreWordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open RedirectionCVE-2023-312374.7 Medium
- dylan james zephyr project manager, zephyr project manager project project manager +1 moreWordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-343735.4 Medium
- dylanjkotze zephyr project managerZephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSSCVE-2022-28395.4 Medium
- dylanjkotze zephyr project managerZephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLiCVE-2022-2840Public exploitEPSS 13.4%9.8 Critical
- dylanjkotze zephyr project manager, zephyr project manager project project manager +1 moreZephyr Project Manager <= 3.2.40 - Reflected Cross-Site ScriptingCVE-2022-18226.1 Medium