KaineLabs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Youzify | 2 | – | Nov 1, 2024 |
| Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 1 | – | Dec 21, 2023 |
| Youzify - Buddypress Moderation | 1 | – | Mar 25, 2024 |
Exploited and recent CVEs
- CVE-2024-39635 WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability 0.4%
- CVE-2024-37494 WordPress Youzify plugin <= 1.2.5 - SQL Injection vulnerability 0.5%
- CVE-2024-2864 WordPress Youzify - Buddypress Moderation plugin <= 1.2.5 - Unauthenticated Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-47191 WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR) 0.4%