Dylanjkotze
5 CVEs across 2 Dylanjkotze products. Browse Dylanjkotze vulnerabilities, severities, and proof-of-concept exploits.
Dylanjkotze products with known CVEs
Dylanjkotze CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-12496 | Medium | 4.9 | 2025-12-17 | The Zephyr Project Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.203 via the `file` parameter. Th… |
CVE-2025-10490 | Medium | 4.4 | 2025-09-26 | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 d… |
CVE-2024-43916 | Medium | 4.3 | 2024-08-26 | Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a throug… |
CVE-2024-7624 | High | 8.1 | 2024-08-15 | The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the… |
CVE-2024-7356 | Medium | 6.4 | 2024-08-03 | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ parameter in all versions up to, and including… |
CVE-2024-6536 | Medium | 5.4 | 2024-07-30 | The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could allow high privilege users such as edi… |
CVE-2022-1822 | Medium | 6.1 | 2022-06-13 | The Zephyr Project Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘project’ parameter in versions up to, and including, 3… |