Skip to content
OpenAdvisories

Vendor

Dylan James

11 known vulnerabilities.

Products

Zephyr Project Manager 10 Zephyr Admin Theme 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-39552

    WordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.200.

    Dylan James Zephyr Project Manager
  • Medium 5.5
    CVE-2024-43915

    WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through .3.102.

    Dylan James Zephyr Project Manager
  • Medium 4.3
    CVE-2024-43916

    WordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.102.

    Dylan James Zephyr Project Manager
  • Medium 5.4
    CVE-2024-43322

    WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100.

    Dylan James Zephyr Project Manager
  • Medium 4.7
    CVE-2023-31237

    WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9.

    Dylan James Zephyr Project Manager
  • Medium 5.4
    CVE-2023-34373

    WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Project Manager plugin <= 3.3.93 versions.

    Dylan James Zephyr Project Manager