Skip to content
PluginCanary

Youzify

Youzify - BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
by Youzify · 5,000+ active installs · Checked 3 Nov 2026
Avoid4 Criticals1 Warning

Avoid: vulnerability published 5 Oct 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Youzify
Ownership100
Maintenance55
Security0
Support70
Reputation70

How the score works

Quick answers

Is Youzify still maintained?
Yes. Last release 15 Mar 2026, 6 releases in the last 24 months. 15 Mar 2026 · wordpress.org
Who owns Youzify, and has it changed hands?
No change recorded. Main committer youzify since Mar 2021. 3 Nov 2026 · SVN log
Was Youzify removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Youzify safe?
No. 4 known vulnerabilities have no fix in the current version. 5 Oct 2026 · Wordfence Intelligence
Is the latest Youzify update safe to install?
No ownership change before 1.3.7. No one-star spike after it. 15 Mar 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 5 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Oct 2026Evidence
  • CriticalSEC-2Vulnerability published 8 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.22 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 18 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.1 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 27 Dec 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.10 Jan 2026Evidence
  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master26 Nov 2020 to 26 Nov 2020, 1 commits
youzify5 Mar 2021 to 15 Mar 2026, 84 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
8 months ago
Releases, 24 months
6
Tested up to
6.9 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Youzify
Q1 20241
Q2 20240
Q3 20245
Q4 20242
Q1 20253
Q2 20250
Q3 20250
Q4 20250
Q1 20262
Q2 20260
Q3 20260
Q4 20260

Last release 15 Mar 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star185
4 star1
3 star0
2 star2
1 star6

Security record

8 vulnerabilities in 24 months (17 on record), 4 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.3.7No fixn/a
8 Sep 2026Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Authenticated (Subscriber+) Arbitrary File Read6.5<= 1.3.7No fixn/a
18 Aug 2026Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Unauthenticated PHP Object Injection8.1<= 1.3.7No fixn/a
27 Dec 2025Youzify <= 1.3.7 - Authenticated (Subscriber+) Server-Side Request Forgery6.4<= 1.3.7No fixn/a
Show 13 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Apr 2026Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter6.4<= 1.3.61.3.7Patched before disclosure
24 Jan 2025Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)6.5<= 1.3.31.3.414
24 Jan 2025Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update4.3<= 1.3.41.3.552
24 Jan 2025Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion4.3<= 1.3.21.3.3Patched before disclosure
9 Oct 2024Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode6.4<= 1.3.01.3.11
9 Oct 2024Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion4.3<= 1.3.01.3.11
24 Jul 2024Youzify <= 1.2.6 - Missing Authorization4.3<= 1.2.61.2.8Patched before disclosure
4 Jul 2024Youzify <= 1.2.5 - Authenticated (Contributor+) SQL Injection9.9<= 1.2.51.2.67
19 Jun 2024Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection6.5<= 1.2.51.2.622
3 Nov 2023Youzify <= 1.2.2 - Insecure Direct Object Reference6.5<= 1.2.21.2.3Patched before disclosure
24 Jan 2023Youzify <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.2.11.2.2Patched before disclosure
13 Jul 2022Youzify <= 1.1.9 - SQL Injection9.8<= 1.1.91.2.0Patched before disclosure
28 Jun 2021Youzify <= 1.0.6 - Stored Cross-Site Scripting6.4<= 1.0.61.0.7Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 2 support threads resolved in the last 2 months.

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Youzify
4 May 2026135
11 May 2026227
18 May 2026311
25 May 2026235
1 Jun 2026191
8 Jun 2026213
15 Jun 2026189
22 Jun 2026165
29 Jun 2026176
6 Jul 2026166
13 Jul 2026167
20 Jul 2026149
27 Jul 2026194
3 Aug 2026198
10 Aug 2026192
17 Aug 2026263
24 Aug 2026226
31 Aug 2026256
7 Sep 2026239
14 Sep 2026216
21 Sep 2026214
28 Sep 2026282
5 Oct 2026267
12 Oct 2026275
19 Oct 2026409
26 Oct 2026300
2 Nov 202652

Weekly downloads over the last 4 weeks are 18% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

bbPressScore 86 · 100,000+Asgaros ForumScore 84 · 10,000+Better MessagesScore 83 · 10,000+BuddyPressScore 81 · 90,000+wpForo ForumScore 81 · 20,000+

Facts

Version1.3.7
AuthorYouzify
Added5 Mar 2021
Last updated15 Mar 2026
Active installs5,000+
Requires WordPress4.9
Tested up to6.9.11
Requires PHP5.6
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagscommunity, buddypress, membership, woocommerce, user profile

Questions

Is Youzify still maintained?

Yes. Last release 15 Mar 2026, 6 releases in the last 24 months.

Who owns Youzify, and has it changed hands?

No change recorded. Main committer youzify since Mar 2021.

Was Youzify removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Youzify safe?

No. 4 known vulnerabilities have no fix in the current version.

Is the latest Youzify update safe to install?

No ownership change before 1.3.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue