Dylan James vulnerabilities
11 vulnerabilities
Known vulnerabilities in Dylan James products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Zephyr Project Manager10 vulnerabilities
- Zephyr Admin Theme1 vulnerabilities
CVE-2025-54714dylan jameszephyr project manager+1
EPSS score0.22%
Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.201.CVE-2025-39552dylan jameszephyr project manager+1EPSS score0.36%
Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.200.CVE-2025-22814dylan jameszephyr admin theme+1EPSS score0.16%
Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through <= 1.4.1.CVE-2025-32526dylan jameszephyr project manager+2EPSS score0.31%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through <= 3.3.101.CVE-2024-37484dylan jameszephyr project manager+2EPSS score0.44%
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97.CVE-2024-43322dylan jameszephyr project manager+2EPSS score0.37%
Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100.CVE-2024-43916dylan jameszephyr project manager+2EPSS score0.32%
Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.102.CVE-2024-43915dylan jameszephyr project manager+2EPSS score0.26%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through .3.102.CVE-2024-38761dylan jameszephyr project manager+2EPSS score0.45%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.99.CVE-2023-31237dylan jameszephyr project manager+2EPSS score0.36%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9.CVE-2023-34373dylan jameszephyr project manager+2EPSS score0.25%
Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Project Manager plugin <= 3.3.93 versions.