Kainelabs vulnerabilities

Products

• Youzify 13

Newest

• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_li… CVE-2024-13370 6.5 MediumJanuary 25, 2025
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update CVE-2024-13368 4.3 MediumJanuary 25, 2025
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion CVE-2024-12113 4.3 MediumJanuary 25, 2025
• kainelabs youzify WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability CVE-2024-39635 5.4 MediumNovember 1, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion CVE-2024-9067 4.3 MediumOctober 10, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode CVE-2024-8987 6.4 MediumOctober 10, 2024
• kainelabs youzify WordPress Youzify plugin <= 1.2.5 - SQL Injection vulnerability CVE-2024-37494 8.5 HighJuly 9, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 more Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection CVE-2024-4742 6.5 MediumJune 20, 2024
• kainelabs youzify, youzify - buddypress moderation +1 more WordPress Youzify - Buddypress Moderation plugin <= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerability CVE-2024-2864 7.3 HighMarch 25, 2024
• kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR) CVE-2023-47191 6.5 MediumDecember 21, 2023
• kainelabs youzify Youzify < 1.2.2 - Contributor+ Stored XSS CVE-2023-0059 5.4 MediumFebruary 21, 2023
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.2.0 - Unauthenticated SQLi CVE-2022-1950 9.8 CriticalAugust 1, 2022
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.0.7 - Stored Cross-Site Scripting via Biography CVE-2021-24443 5.4 MediumAugust 2, 2021