Skip to content
OpenAdvisories

Product · Dylan James

Zephyr Project Manager

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2025-54714

    WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.201.

    Dylan James Zephyr Project Manager
  • High 7.1
    CVE-2025-32526

    WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through <= 3.3.101.

    Dylan James Zephyr Project Manager
  • High 7.5
    CVE-2024-38761

    WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.99.

    Dylan James Zephyr Project Manager
  • High 8.8
    CVE-2024-37484

    WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97.

    Dylan James Zephyr Project Manager