YYouzify

Products

Exploited and recent CVEs

• CVE-2026-39780 High 7.1 WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-81275 Medium 6.5 WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability 0.4%
• CVE-2026-73397 Critical 9.8 WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability 0.6%
• CVE-2026-1559 Medium 6.4 Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter 0.2%
• CVE-2025-69014 Medium 4.9 WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability 0.2%
• CVE-2024-13370 Medium 6.5 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license) 0.4%
• CVE-2024-13368 Medium 4.3 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update 0.4%
• CVE-2024-12113 Medium 4.3 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion 0.3%
• CVE-2024-9067 Medium 4.3 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion 0.3%
• CVE-2024-8987 Medium 6.4 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode 0.3%
• CVE-2024-4742 Medium 6.5 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection 0.5%