TI-2026-36293 CVE-2026-49067 · GHSA-4r48-pfgj-8jrr
WordPress Advanced 301 and 302 Redirect plugin <= 1.6.9 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
Vulnerabilities
4 records
TI-2025-11496 CVE-2025-12527 · GHSA-w86f-f8mj-wm7p
Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion
Priority LOW 20
The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capability check on the 'yydev_notes_save_dashboard_data' function in all versions up to, and including, 1.3…
TI-2025-36290 CVE-2025-58622 · GHSA-h46h-3x3q-8j89
WordPress Mobile Contact Line Plugin <= 2.4.0 - Broken Access Control Vulnerability
Priority LOW 20
Missing Authorization vulnerability in yydevelopment Mobile Contact Line mobile-contact-line allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile Contact Line: from n/a throug…
TI-2023-22148 CVE-2023-41733 · GHSA-5pqc-4j66-r4q3
WordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions.