Youzify
Vendor:
First CVE: Aug 2, 2021 · Active for 4 years
13
Total CVEs
More Total CVEs than 92% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Youzify over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 2, 2021
4 years ago
Most Recent CVE
Jan 25, 2025
549 days ago
CVE Severity & Scoring
Youzify13 CVEs
69%
23%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network13 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (69.2%)
Unknown0 (0.0%)
Required4 (30.8%)
Privileges Required
Low11 (84.6%)
High0 (0.0%)
None2 (15.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-1950CRITICAL The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading | Aug 1, 2022 | 9.8 | 37 | NO | YES |
CVE-2024-4742HIGH The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the order_by shortcode at | Jun 20, 2024 | 8.8 | 27 | NO | NO |
CVE-2024-37494HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaineLabs Youzify.This issue affects Youzify: from n/a through 1.2.5. | Jul 9, 2024 | 8.8 | 24 | NO | NO |
CVE-2024-39635HIGH Missing Authorization vulnerability in KaineLabs Youzify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youzify: from n/a through 1.2.6. | Nov 1, 2024 | 8.8 | 23 | NO | NO |
CVE-2023-47191MEDIUM Authorization Bypass Through User-Controlled Key vulnerability in KaineLabs Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress.This issu | Dec 21, 2023 | 6.5 | 21 | NO | NO |
CVE-2024-2864MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaineLabs Youzify - Buddypress Moderation.This issue affects Youzify - Buddypr | Mar 25, 2024 | 6.1 | 19 | NO | NO |
CVE-2023-0059MEDIUM The Youzify WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, whi | Feb 21, 2023 | 5.4 | 19 | NO | NO |
CVE-2021-24443MEDIUM The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network & Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, a | Aug 2, 2021 | 5.4 | 19 | NO | NO |
CVE-2024-13370MEDIUM The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capabi | Jan 25, 2025 | 6.5 | 17 | NO | NO |
CVE-2024-8987MEDIUM The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin' | Oct 10, 2024 | 5.4 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
7.7% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Youzify
Top CWEs
Versions
No cataloged versions.