CVE Catalog
CVE-2026-73397
CriticalCVSS 9.8Summary
Unauthenticated Deserialization of untrusted data vulnerability in Youzify plugin versions up to 1.3.7. An attacker without authentication can deserialize data, potentially leading to remote code execution.
Risk Assessment
Potential for remote code execution on the server, which may result in full system compromise.
Recommendation
Update the Youzify plugin to a version newer than 1.3.7.
Original NVD description (English source)
Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions.