Dylanjkotze

8 CVEs in 2 Dylanjkotze products, including Zephyr Project Manager, Zephyr Project Manager. Newest: CVE-2026-76931 (2026-09-08).

Dylanjkotze products with known CVEs

ProductCVEs
Zephyr Project Manager6
Zephyr Project Manager2
Dylanjkotze CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-76931Medium6.42026-09-08The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including…
CVE-2025-12496Medium4.92025-12-17The Zephyr Project Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.203 via the `file` parameter. Th…
CVE-2025-10490Medium4.42025-09-26The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 d…
CVE-2024-43916Medium4.32024-08-26Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a throug…
CVE-2024-7624High8.12024-08-15The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 3.3.101. This is due to the…
CVE-2024-7356Medium6.42024-08-03The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ parameter in all versions up to, and including…
CVE-2024-6536Medium5.42024-07-30The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could allow high privilege users such as edi…
CVE-2022-1822Medium6.12022-06-13The Zephyr Project Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘project’ parameter in versions up to, and including, 3…