Access violation vulnerability in Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress 1.3.0

The Youzify plugin for WordPress, which helps create a community, user profiles, and social network, has a security vulnerability. This means that unauthorized people can change data without permission. The problem is in the ‘delete_attachment’ function, and it affects all versions of the plugin up to 1.3.0. This allows attackers who have Subscriber-level access or higher to delete any attachments they want.