{"items":[{"id":"CVE-2026-49067","published":"2026-06-15T20:19:13.749Z","updated":"2026-06-16T01:19:39.239Z","title":"WordPress Advanced 301 and 302 Redirect plugin <= 1.6.9 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"yydevelopment","product":"Advanced 301 and 302 Redirect","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2025-12527","published":"2025-11-07T05:29:58.432Z","updated":"2026-04-08T17:09:46.076Z","title":"Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion","severity":"MEDIUM","score":4.3,"vendor":"yydevelopment","product":"Page & Post Notes","kev":false,"epss":0.0025,"kevAdded":null,"exploit":false},{"id":"CVE-2025-58622","published":"2025-09-03T14:36:50.930Z","updated":"2026-04-28T16:13:44.323Z","title":"WordPress Mobile Contact Line Plugin <= 2.4.0 - Broken Access Control Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"yydevelopment","product":"Mobile Contact Line","kev":false,"epss":0.00241,"kevAdded":null,"exploit":false},{"id":"CVE-2023-41733","published":"2023-10-02T07:49:09.471Z","updated":"2026-04-28T16:08:38.670Z","title":"WordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"YYDevelopment","product":"Back To The Top Button","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false}]}