Skip to contentZephyr-one Zephyr Project Manager vulnerabilities
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-325267.1 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-439155.5 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-433225.4 Medium
- dylanjkotze zephyr project managerZephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege EscalationCVE-2024-76248.1 High
- dylanjames zephyr project managerZephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename ParameterCVE-2024-73566.4 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerabilityCVE-2024-387617.5 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerabilityCVE-2024-374848.8 High
- dylanjkotze zephyr project managerZephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSSCVE-2022-28395.4 Medium
- zephyr project manager, zephyr-one zephyr project manager +1 moreZephyr Project Manager REST Call cross site scriptingCVE-2022-33333.5 Low
- dylanjkotze zephyr project managerZephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLiCVE-2022-2840Public exploitEPSS 13.2%9.8 Critical