https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13370.htmlhttps://patchthecve.com/cve/CVE-2024-13370.htmlWed, 17 Jun 2026 07:01:52 +0000MEDIUM 6.5: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the save_addon_key_license() function in all versions up to, and including, 1.3.3. This makes it possible https://patchthecve.com/cve/CVE-2024-13368.htmlhttps://patchthecve.com/cve/CVE-2024-13368.htmlWed, 17 Jun 2026 07:01:52 +0000MEDIUM 4.3: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the youzify_offer_banner() function in all versions up to, and including, 1.3.4. This makes it possible fohttps://patchthecve.com/cve/CVE-2024-12113.htmlhttps://patchthecve.com/cve/CVE-2024-12113.htmlWed, 17 Jun 2026 06:59:04 +0000MEDIUM 4.3: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_user_review() and delete_review() functions in all versions up to, and including, 1.3.2. https://patchthecve.com/cve/CVE-2024-39635.htmlhttps://patchthecve.com/cve/CVE-2024-39635.htmlWed, 17 Jun 2026 07:42:21 +0000MEDIUM 5.4: Missing Authorization vulnerability in KaineLabs Youzify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youzify: from n/a through 1.2.6.https://patchthecve.com/cve/CVE-2024-9067.htmlhttps://patchthecve.com/cve/CVE-2024-9067.htmlWed, 17 Jun 2026 08:23:53 +0000MEDIUM 4.3: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'delete_attachment' function in all versions up to, and including, 1.3.0. This makes it https://patchthecve.com/cve/CVE-2024-8987.htmlhttps://patchthecve.com/cve/CVE-2024-8987.htmlWed, 17 Jun 2026 08:23:42 +0000MEDIUM 6.4: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's youzify_media shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output https://patchthecve.com/cve/CVE-2024-37494.htmlhttps://patchthecve.com/cve/CVE-2024-37494.htmlWed, 17 Jun 2026 07:38:28 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaineLabs Youzify.This issue affects Youzify: from n/a through 1.2.5.https://patchthecve.com/cve/CVE-2024-4742.htmlhttps://patchthecve.com/cve/CVE-2024-4742.htmlWed, 17 Jun 2026 08:02:32 +0000MEDIUM 6.5: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the order_by shortcode attribute in all versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack