Skip to contentKainelabs Youzify vulnerabilities
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 moreYouzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_li…CVE-2024-133706.5 Medium
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 moreYouzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options UpdateCVE-2024-133684.3 Medium
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 moreYouzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review DeletionCVE-2024-121134.3 Medium
- kainelabs youzifyWordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerabilityCVE-2024-396355.4 Medium
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 moreYouzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment DeletionCVE-2024-90674.3 Medium
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 moreYouzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media ShortcodeCVE-2024-89876.4 Medium
- kainelabs youzifyWordPress Youzify plugin <= 1.2.5 - SQL Injection vulnerabilityCVE-2024-374948.5 High
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress +1 moreYouzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL InjectionCVE-2024-47426.5 Medium
- kainelabs youzify, youzify - buddypress moderation +1 moreWordPress Youzify - Buddypress Moderation plugin <= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerabilityCVE-2024-28647.3 High
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreWordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)CVE-2023-471916.5 Medium
- kainelabs youzifyYouzify < 1.2.2 - Contributor+ Stored XSSCVE-2023-00595.4 Medium
- kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreYouzify < 1.2.0 - Unauthenticated SQLiCVE-2022-19509.8 Critical
- kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreYouzify < 1.0.7 - Stored Cross-Site Scripting via BiographyCVE-2021-244435.4 Medium