CVE-2026-81275

Thursday, September 10, 2026

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions.

Affected Software

Vendor	Product	Version Range	Status
Youzify	Youzify	`n/a <= 1.3.7`	affected

Weaknesses

CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References

https://patchstack.com/database/wordpress/plugin/youzify/vulnerability/wordpress-youzify-plugin-1-3-7-arbitrary-file-download-vulnerability?_s_id=cve

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.