Yydevelopment - vulnerabilities (CVEs)

4 CVEs in 4 products, 0 in the last 30 days, newest from 2026-06-15.

Products

• Advanced 301 And 302 Redirect - 1 CVEs
• Back To The Top Button - 1 CVEs
• Mobile Contact Line - 1 CVEs
• Page Post Notes - 1 CVEs

Newest CVEs of Yydevelopment

• CVE-2026-49067 - CVSS 9.3 (critical), 2026-06-15: Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
• CVE-2025-12527 - CVSS 4.3 (medium), 2025-11-07: The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capability check on the…
• CVE-2025-58622 - CVSS 4.3 (medium), 2025-09-03: Missing Authorization vulnerability in yydevelopment Mobile Contact Line mobile-contact-line allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2023-41733 - CVSS 5.9 (medium), 2023-10-02: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions.