Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

youzify — Vulnerabilities & Security Advisories 8

Browse all 8 CVE security advisories affecting youzify. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2026-1559 Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPressCWE-79 6.4 Medium2026-04-18
CVE-2025-69014 WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability — YouzifyCWE-918 4.9 Medium2025-12-30
CVE-2024-13370 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license) — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPressCWE-862 6.5 Medium2025-01-25
CVE-2024-13368 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPressCWE-862 4.3 Medium2025-01-25
CVE-2024-12113 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPressCWE-862 4.3 Medium2025-01-25
CVE-2024-9067 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPressCWE-862 4.3 Medium2024-10-10
CVE-2024-8987 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPressCWE-79 6.4 Medium2024-10-10
CVE-2024-4742 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection — Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPressCWE-89 6.5 Medium2024-06-20

This page lists every published CVE security advisory associated with youzify. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.