YO
Vendor
youzify
11
CVEs
0
On KEV
1
New 30D
Products
YO9.8
Youzify
Youzify
4 CVEs0 on KEV1 new
YB6.5
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
youzify
7 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-39780 | YO Youzify Youzify | 7.1 | Oct 6 | WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81275 | YO Youzify Youzify | 6.5 | Sep 10 | WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability |
| CVE-2026-73397 | YO Youzify Youzify | 9.8 | Aug 18 | WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability |
| CVE-2026-1559 | YB Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify | 6.4 | Apr 18 | Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter |
| CVE-2025-69014 | YO Youzify Youzify | 4.9 | Dec 30 | WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2024-13370 | YB Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify | 6.5 | Jan 25 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license) |
| CVE-2024-13368 | YB Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify | 4.3 | Jan 25 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update |
| CVE-2024-12113 | YB Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify | 4.3 | Jan 25 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion |
| CVE-2024-9067 | YB Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify | 4.3 | Oct 10 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion |
| CVE-2024-8987 | YB Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify | 5.4 | Oct 10 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode |
| CVE-2024-4742 | YB Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify | 6.5 | Jun 20 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection |