Lucene search
K

82 matches found

RedhatCVE
RedhatCVE
added 2026/04/20 7:22 p.m.2 views

CVE-2026-1559

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/04/20 9:37 a.m.3 views

WordPress Youzify plugin <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via 'checkinplaceid' Parameter vulnerability discovered by Tharadol Suksamran d3kc4rt1 in WordPress Plugin Youzify versions = 1.3.6...

6.4CVSS5.8AI score0.00046EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/04/18 2:16 a.m.1 views

CVE-2026-1559

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS0.00046EPSS
Exploits0References7
CVE
CVE
added 2026/04/18 1:26 a.m.4 views

CVE-2026-1559

The Youzify WordPress plugin is affected by CVE-2026-1559, a Stored Cross‑Site Scripting vulnerability. It enables authenticated users with Subscriber+ rights to inject scripts via the checkin_place_id parameter in versions up to 1.3.6 due to insufficient input sanitization and output escaping; s...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/04/18 1:26 a.m.28 views

CVE-2026-1559 Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS0.00046EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/04/18 1:26 a.m.2 views

CVE-2026-1559 Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkinplaceid' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/04/18 12:0 a.m.2 views

WordPress plugin Youzify 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS6AI score0.00046EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/18 12:0 a.m.2 views

PT-2026-33579

The Youzify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkin place id' parameter in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acce...

6.4CVSS5.9AI score0.00046EPSS
Exploits0References8
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.4 views

WordPress Youzify plugin <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license) vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Options Update saveaddonkeylicense vulnerability discovered by Stiofan - AyeCode Ltd in WordPress Plugin Youzify versions = 1.3.3...

6.5CVSS5.5AI score0.00283EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/30 10:47 a.m.2 views

CVE-2025-69014 WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Youzify Youzify youzify allows Server Side Request Forgery.This issue affects Youzify: from n/a through = 1.3.7...

4.9CVSS5.9AI score0.00022EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/30 10:47 a.m.23 views

CVE-2025-69014 WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Youzify Youzify youzify allows Server Side Request Forgery.This issue affects Youzify: from n/a through = 1.3.7...

4.9CVSS0.00022EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

WordPress plugin Youzify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.9CVSS5.8AI score0.00022EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/27 2:36 p.m.3 views

WordPress Youzify plugin <= 1.3.6 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by NumeX in WordPress Plugin Youzify versions = 1.3.6...

4.9CVSS6.8AI score0.00022EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-11355

Malware in sbrugna...

5.4CVSS5.6AI score0.00368EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-51560

Malicious code in bioql PyPI...

6.5CVSS8.9AI score0.00283EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-50606

Malicious code in bioql PyPI...

4.3CVSS8.9AI score0.00209EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-12160

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00198EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49703

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00228EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49524

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00394EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-44339

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00634EPSS
Exploits0References2
Rows per page
Query Builder