Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

CVE-2026-39780

Unauthenticated Cross Site Scripting XSS in Youzify = 1.3.7 versions...

CVE-2026-39780 WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Youzify = 1.3.7 versions...

CVE-2026-39780 WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Youzify = 1.3.7 versions...

CVE-2026-39780

The Youzify WordPress plugin versions

EUVD-2026-93028

Unauthenticated Cross Site Scripting XSS in Youzify = 1.3.7 versions...

PT-2026-106450

Unauthenticated Cross Site Scripting XSS in Youzify = 1.3.7 versions...

CVE-2026-39780: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Youzify = 1.3.7 versions...

WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by etomixer in WordPress Plugin Youzify versions = 1.3.7...

CVE-2026-81275

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

EUVD-2026-75514

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

CVE-2026-81275 WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

CVE-2026-81275

The WordPress Youzify plugin (versions

CVE-2026-81275 WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

CVE-2026-81275: Improper Limitation of a Pathname to a Restricted Directory

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

PT-2026-89428

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by dodoh4t in WordPress Plugin Youzify versions = 1.3.7...

CVE-2026-73397

Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...

CVE-2026-73397 WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability

Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...

CVE-2026-73397

Youzify plugin versions up to 1.3.7 suffer from unauthenticated deserialization of untrusted data, scored CVSS 9.8 (critical) with network access, no privileges, and full CIA impact. Upgrade beyond 1.3.7 or disable the plugin; no exploit code is provided in the documents.