Product by Dylan James

    Zephyr Project Manager

    10 known vulnerabilities in Zephyr Project Manager (Dylan James), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zephyr Project Manager (Dylan James)
    CriticalCVE-2022-2840

    Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi

    		9.8
    HighCVE-2024-37484

    WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability

    also in 1 other product

    		8.8
    HighCVE-2024-7624

    Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

    also in 1 other product

    		8.1
    HighCVE-2024-38761

    Dylan James Zephyr Project Manager: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		7.5
    HighCVE-2025-32526

    WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2024-7356

    Dylanjkotze Zephyr Project Manager: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2022-2839

    Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS

    		5.4
    CriticalCVE-2024-43322

    Dylan James Zephyr Project Manager: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		5.4
    MediumCVE-2024-43915

    WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		5.5
    MediumCVE-2022-3333

    Zephyr Project Manager REST Call cross site scripting

    		3.5

    All products by Dylan James