YYDevelopment
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced 301 and 302 Redirect | 1 | – | Jun 15, 2026 |
| Back To The Top Button | 1 | – | Oct 2, 2023 |
| Mobile Contact Line | 1 | – | Sep 3, 2025 |
| Page & Post Notes | 1 | – | Nov 7, 2025 |
Exploited and recent CVEs
- CVE-2026-49067 WordPress Advanced 301 and 302 Redirect plugin <= 1.6.9 - SQL Injection vulnerability 0.3%
- CVE-2025-12527 Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion 0.2%
- CVE-2025-58622 WordPress Mobile Contact Line Plugin <= 2.4.0 - Broken Access Control Vulnerability 0.2%
- CVE-2023-41733 WordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS) 0.4%