Access violation vulnerability in Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress 1.3.2

The Youzify plugin for WordPress allows users to create a community, profile, social network and membership. However, it has a security issue that allows unauthorized people to access it. This is because the plugin does not have a check for certain capabilities in the youzify_offer_banner() function. This means that anyone with a Subscriber-level account or higher can change the site’s options to a specific value.