This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2022-1950 | BDVDB-2026-181306 Detail

Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

Description#

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.