CoreCVE
Back

CRITICAL

Youzify < 1.2.0 - Unauthenticated SQLi

Published Aug 1, 2022

Description

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner WPScan
Published Aug 1, 2022
Updated Aug 3, 2024
Reserved May 31, 2022
Link CVE-2022-1950
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-1950
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-1950
ENISA EUVD
Assigner WPScan
Published Aug 1, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-25218
EUVD-2022-25218