YB
Product
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
by youzify · last CVE Apr 18, 2026
7
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 7Low 0
Watch

Add Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13370
6.5
0%
Jan 25
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)
Affected: through 1.3.3
CVE-2024-4742
6.5
0%
Jun 20
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Affected: through 1.2.5
CVE-2026-1559
6.4
0%
Apr 18
Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter
Affected: through 1.3.6
CVE-2024-8987
5.4
0%
Oct 10
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Affected: through 1.3.0
CVE-2024-13368
4.3
0%
Jan 25
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Affected: through 1.3.4
CVE-2024-12113
4.3
0%
Jan 25
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion
Affected: through 1.3.2
CVE-2024-9067
4.3
0%
Oct 10
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion
Affected: through 1.3.0
Showing 7