WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
youzify
Published
2024-07-04
Title
Youzify < 1.2.6 - Authenticated (Contributor+) SQL Injection
Slug
youzify
Published
2024-07-24
Title
Youzify < 1.2.8 - Missing Authorization
Slug
youzify
Published
2024-10-09
Title
Youzify < 1.3.1 - Subscriber+ Arbitrary Attachment Deletion
Slug
youzify
Published
2024-10-09
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs < 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
youzify
Published
2025-01-24
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress < 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)
Slug
youzify
Published
2025-12-27
Title
Youzify <= 1.3.7 - Subscriber+ Server-Side Request Forgery
Slug
youzify
Published
2026-04-17
Title
Youzify < 1.3.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter
Slug
youzify
Published
2026-09-08
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Authenticated (Subscriber+) Arbitrary File Read
Slug
youzify
Published
2026-08-18
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Unauthenticated PHP Object Injection
Slug
youzify
Published
2026-10-05
Title
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Unauthenticated Stored Cross-Site Scripting
Slug
youzify-moderation
Published
2024-03-25
Title
Buddypress Moderation <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting
Slug
yphplista
Published
2024-11-08
Title
yPHPlista <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yphplista
Published
2024-11-22
Title
yPHPlista <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
yr-activity-link
Published
2024-11-08
Title
活动链接推广插件 < 1.2.4 - Contributor+ Stored XSS
Slug
ysleadgen
Published
2026-09-18
Title
YS LeadGen – Popups, Opt-ins & Lead Capture < 2.1.5 - Unauthenticated Information Disclosure in 'ysleadgen_get_captured_data' AJAX Action
Slug
ysleadgen
Published
2026-09-18
Title
YS LeadGen – Popups, Opt-ins & Lead Capture < 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via User Input
Slug
yslider
Published
2025-11-10
Title
YSlider <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
yt-cookie-nonsense
Published
2024-11-08
Title
Cookie Nonsense for YT <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
yt-player
Published
2021-09-22
Title
YT Player < 1.4 - Contributor+ Stored Cross-Site Scripting
Slug
yt-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
yt-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
yt-player
Published
2026-07-22
Title
YT Player – Embed and Customize Video Players < 2.1.3 - Missing Authorization
Slug
yt-player
Published
2026-09-03
Title
YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax