Skip to content
OpenAdvisories

Vendor

codeclouds

2 known vulnerabilities.

Products

Unify 2
All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-13529

    Unify <= 3.4.9 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter

    The Unify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'init' action in all versions up to, and including, 3.4.9. This makes it possible for unauthenticated attackers to delete specific plugi…

    codeclouds Unify Web / CMS
  • Medium 6.4
    CVE-2025-9130

    Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode

    The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unify_checkout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attribu…

    codeclouds Unify Web / CMS