Skip to content

Known vulnerabilities in dylanjkotze Zephyr Project Manager

Is your version affected?

CVE Summary Score Published
CVE-2026-76931 The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter… 6.4 Medium Sep 8, 2026
CVE-2025-12496 The Zephyr Project Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and… 4.9 Medium Dec 17, 2025
CVE-2025-10490 The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all… 4.4 Medium Sep 26, 2025
CVE-2024-7624 The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and… 8.1 High Aug 15, 2024
CVE-2024-7356 The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’… 6.4 Medium Aug 3, 2024
CVE-2022-1822 The Zephyr Project Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘project’… 6.1 Medium Jun 13, 2022