KaineLabs vulnerabilities
We track 4 vulnerabilities in KaineLabs products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 1, 2024.
Latest KaineLabs vulnerabilities
- 8.8 High severity
Youzify: Missing Authorization
Missing Authorization vulnerability in KaineLabs Youzify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youzify: from n/a through 1.2.6.
- 8.8 High severity
Youzify: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaineLabs Youzify.This issue affects Youzify: from n/a through 1.2.5.
- 8.8 High severity
Youzify – BuddyPress Community, User Profile…: Improper Neutralization of Special Elements used in an SQL Command
The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the order_by shortcode attribute in all versions up to, and including, 1.2.5 due to insufficient escaping
- 9.8 Critical severity
Youzify – BuddyPress Community, User Profile…: Improper Neutralization of Special Elements used in an SQL Command
The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection