CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in KaineLabs Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress.This issue affects Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress: from n/a through 1.2.2.
Explanation of Vulnerability in Simple Terms
Youzify versions up to 1.2.2 contain an authorization flaw that allows authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter site content or settings through improper access controls. The vulnerability requires a valid WordPress user account but no additional user interaction. Site administrators should update to a version newer than 1.2.2.
What an attacker can do
Modify or alter site data and settings beyond their assigned permissions.
Potential impact on your site
Unauthorized users can change site content, user profiles, or community settings they should not control.
Conditions required to exploit
Attacker must have a valid low-privilege WordPress user account; no user interaction required.
Key dates
External resources
Related vulnerabilities
