Dylan James vulnerabilities and threats

9 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2025-54714Zephyr Project Manager (WordPress plugin) · Missing Authorization High7.1EPSS 0.2%2025-08-28CVE Database V5CVE-2025-54714 Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.201. EPSS 0.2%Vulnerability Dylan James CWE-862	CVE Database V5	2025-08-28
High	7.1	EPSS 0.3%	CVE-2025-32526Zephyr Project Manager (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-04-17CVE Database V5CVE-2025-32526 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through <= 3.3.101. EPSS 0.3%Vulnerability Dylan James	CVE Database V5	2025-04-17
Medium	5.4	EPSS 0.4%	CVE-2025-39552Zephyr Project Manager (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.4%2025-04-16CVE Database V5CVE-2025-39552 Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.200. EPSS 0.4%Vulnerability Dylan James	CVE Database V5	2025-04-16
High	7.1	EPSS 0.2%	CVE-2025-22814Dylan James Zephyr Admin Theme · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2025-01-09CVE Database V5CVE-2025-22814 Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through <= 1.4.1. EPSS 0.2%Vulnerability	CVE Database V5	2025-01-09
Medium	5.5	EPSS 0.3%	CVE-2024-43915Zephyr Project Manager (WordPress plugin) · XSS or 'Cross-site Scripting' Medium5.5EPSS 0.3%2024-08-26CVE Database V5CVE-2024-43915 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through .3.102. EPSS 0.3%Vulnerability Dylan James CWE-79	CVE Database V5	2024-08-26
Medium	4.3	EPSS 0.3%	CVE-2024-43916Zephyr Project Manager (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2024-08-26CVE Database V5CVE-2024-43916 Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.102. EPSS 0.3%Vulnerability Dylan James CWE-639	CVE Database V5	2024-08-26
Medium	5.4	EPSS 0.4%	CVE-2024-43322Zephyr Project Manager (WordPress plugin) · Insecure Direct Object Reference Medium5.4EPSS 0.4%2024-08-18CVE Database V5CVE-2024-43322 Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100. EPSS 0.4%Vulnerability Dylan James CWE-639	CVE Database V5	2024-08-18
High	7.5	EPSS 0.4%	CVE-2024-38761Zephyr Project Manager (WordPress plugin) · Information Exposure High7.5EPSS 0.4%2024-08-01CVE Database V5CVE-2024-38761 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.99. EPSS 0.4%Vulnerability Dylan James CWE-200	CVE Database V5	2024-08-01
High	8.8	EPSS 0.4%	CVE-2024-37484Zephyr Project Manager (WordPress plugin) · Improper Privilege Management High8.8EPSS 0.4%2024-07-09CVE Database V5CVE-2024-37484 Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97. EPSS 0.4%Vulnerability Dylan James CWE-269	CVE Database V5	2024-07-09

Page 1 of 1