yydevelopment CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL yydevelopment CVE published 2026-06-15

CVE-2026-49067

A critical unauthenticated SQL injection vulnerability exists in the Advanced 301 and 302 Redirect WordPress plugin versions up to 1.6.9. This vulnerability, tracked as CVE-2026-49067, has a CVSS score of 9.3 and is considered critical. The vulnerability allows attackers to inject malicious SQL code, potentially leading to data breaches or other security issues.