Youzify vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20254
3. 20264

Newest CVEs

• CVE-2026-39780

  WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

  Youzify · Youzify

  High7.1
• CVE-2026-81275

  WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability

  Youzify · Youzify

  Medium6.5
• CVE-2026-73397

  WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability

  Youzify · Youzify

  Critical9.8
• CVE-2026-1559

  Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter

  youzify · Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

  Medium6.4
• CVE-2025-69014

  WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability

  Youzify · Youzify

  Medium4.9
• CVE-2024-13370

  Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)

  youzify · Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

  Medium6.5
• CVE-2024-13368

  Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

  youzify · Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

  Medium4.3
• CVE-2024-12113

  Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion

  youzify · Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

  Medium4.3
• CVE-2024-9067

  Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion

  youzify · Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

  Medium4.3
• CVE-2024-8987

  Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode

  youzify · Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

  Medium6.4