Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress, CVE-2022-1950

CVE, Research URL: CVE-2022-1950
Home page URL: Security reports for Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Application: Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Published on: Aug 01, 2022
Research Description: The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection
Affected versions: max 1.2.0.
Status: vulnerable

Youzify – BuddyPress Community, User Profile, Social Network &amp; Membership Plugin for WordPress, CVE-2022-1950