Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Dylan James Clear all filters
TI-2025-34477 CVE-2025-54714 · GHSA-cg3x-hxf8-m9fx

WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability

Priority LOW 31

Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00223 Published 2025-08-28 No fix listed CWE-862
TI-2025-26294 CVE-2025-39552 · GHSA-6rvr-95xv-gjrq

WordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00358 Published 2025-04-16 No fix listed CWE-862
TI-2025-16695 CVE-2025-22814 · GHSA-hww3-xc4f-4f2v

WordPress Zephyr Admin Theme Plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through <= 1.4.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00156 Published 2025-01-09 No fix listed CWE-352