Skip to content
Zephyr-one vulnerabilities
Newest
-
dylan james zephyr project manager
WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32526
7.1 High
-
dylan james zephyr project manager
WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43915
5.5 Medium
-
dylan james zephyr project manager
WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-43322
5.4 Medium
-
dylanjkotze zephyr project manager
Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation
CVE-2024-7624
8.1 High
-
dylanjames zephyr project manager
Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter
CVE-2024-7356
6.4 Medium
-
dylan james zephyr project manager
WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability
CVE-2024-38761
7.5 High
-
dylan james zephyr project manager
WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability
CVE-2024-37484
8.8 High
-
dylanjkotze zephyr project manager
Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS
CVE-2022-2839
5.4 Medium
-
zephyr project manager, zephyr-one zephyr project manager +1 more
Zephyr Project Manager REST Call cross site scripting
CVE-2022-3333
3.5 Low
-
dylanjkotze zephyr project manager
Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
CVE-2022-2840
Public exploit
EPSS 13.2%
9.8 Critical