WordPress Youzify plugin <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license) vulnerability

🗓️ 31 Dec 2025 00:00:00Reported by Stiofan - AyeCode LtdType

patchstack

patchstack🔗 patchstack.com👁 5 Views

Youzify up to version 1.3.3 has a missing authorization vulnerability for authenticated users.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-13370	25 Jan 202507:58	–	circl
CNNVD	WordPress plugin Youzify 安全漏洞	25 Jan 202500:00	–	cnnvd
CVE	CVE-2024-13370	25 Jan 202507:24	–	cve
Cvelist	CVE-2024-13370 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)	25 Jan 202507:24	–	cvelist
EUVD	EUVD-2024-51560	3 Oct 202520:07	–	euvd
NVD	CVE-2024-13370	25 Jan 202508:15	–	nvd
Positive Technologies	PT-2025-2137 · WordPress · Youzify	25 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-13370	23 May 202507:34	–	redhatcve
Vulnrichment	CVE-2024-13370 Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)	25 Jan 202507:24	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 20, 2025 to January 26, 2025)	30 Jan 202516:04	–	wordfence

Vulners

Node

wordpress youzifyRange≤1.3.3

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/youzify/youzify-buddypress-community-user-profile-social-network-membership-plugin-for-wordpress-132-missing-authorization-to-authenticated-subscriber-limited-options-update-save-addon-key-license

31 Dec 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.16.5

EPSS0.00283

SSVC

youzify plugin missing authorization authenticated users addon key license