DJ
Vendor
Dylan James
11
CVEs
0
On KEV
0
New 30D
Products
ZP9.8
Zephyr Project Manager
Dylan James
10 CVEs0 on KEV0 new
ZA7.1
Zephyr Admin Theme
Dylan James
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-54714 | ZP Zephyr Project Manager Dylan James | 7.1 | Aug 28 | WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability |
| CVE-2025-32526 | ZP Zephyr Project Manager Dylan James | 6.1 | Apr 17 | WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-39552 | ZP Zephyr Project Manager Dylan James | 5.4 | Apr 16 | WordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control Vulnerability |
| CVE-2025-22814 | ZA Zephyr Admin Theme Dylan James | 7.1 | Jan 9 | WordPress Zephyr Admin Theme Plugin <= 1.4.1 - CSRF to Stored XSS vulnerability |
| CVE-2024-43915 | ZP Zephyr Project Manager Dylan James | 5.4 | Aug 26 | WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43916 | ZP Zephyr Project Manager Dylan James | 7.1 | Aug 26 | WordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2024-43322 | ZP Zephyr Project Manager Dylan James | 9.8 | Aug 18 | WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2024-38761 | ZP Zephyr Project Manager Dylan James | 7.5 | Aug 1 | WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability |
| CVE-2024-37484 | ZP Zephyr Project Manager Dylan James | 8.8 | Jul 9 | WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability |
| CVE-2023-31237 | ZP Zephyr Project Manager Dylan James | 6.1 | Dec 29 | WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection |
| CVE-2023-34373 | ZP Zephyr Project Manager Dylan James | 8.8 | Jun 19 | WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF) |
