High
CVE-2026-39780
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2026-81275
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2026-73397
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Unauthenticated PHP Object Injection
Medium
CVE-2026-1559
Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter
Medium
CVE-2025-69014
Youzify <= 1.3.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-13370
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)
Medium
CVE-2024-13368
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2024-12113
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion
Medium
CVE-2024-8987
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Medium
CVE-2024-9067
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion
Medium
CVE-2024-39635
Youzify <= 1.2.6 - Missing Authorization
Critical
CVE-2024-37494
Youzify <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-4742
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-2864
Buddypress Moderation <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-47191
Youzify <= 1.2.2 - Insecure Direct Object Reference
Medium
CVE-2023-0059
Youzify <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-1950
Youzify <= 1.1.9 - SQL Injection
Medium
CVE-2021-24443
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.