Codeclouds Unify vulnerabilities

• codeclouds unify Unify <= 3.4.9 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter CVE-2025-13529 5.3 MediumJanuary 7, 2026
• codeclouds unify Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode CVE-2025-9130 6.4 MediumOctober 3, 2025