TI-2026-36293 CVE-2026-49067 · GHSA-4r48-pfgj-8jrr
WordPress Advanced 301 and 302 Redirect plugin <= 1.6.9 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
yydevelopment
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
yydevelopment records in CISA KEVNo yydevelopment vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2023-22148 CVE-2023-41733 · GHSA-5pqc-4j66-r4q3
WordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions.
TI-2025-36290 CVE-2025-58622 · GHSA-h46h-3x3q-8j89
WordPress Mobile Contact Line Plugin <= 2.4.0 - Broken Access Control Vulnerability
Priority LOW 20
Missing Authorization vulnerability in yydevelopment Mobile Contact Line mobile-contact-line allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile Contact Line: from n/a throug…
TI-2025-11496 CVE-2025-12527 · GHSA-w86f-f8mj-wm7p
Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion
Priority LOW 20
The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capability check on the 'yydev_notes_save_dashboard_data' function in all versions up to, and including, 1.3…