Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress vulnerabilities
We track 1 vulnerability in Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress vulnerabilities
- 9.8 Critical severity
Youzify – BuddyPress Community, User Profile…: Improper Neutralization of Special Elements used in an SQL Command
The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection