Skip to content
OpenAdvisories

Vendor

yydevelopment

4 known vulnerabilities.

Products

Page & Post Notes 1 Back To The Top Button 1 Mobile Contact Line 1 Advanced 301 and 302 Redirect 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-12527

    Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion

    The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capability check on the 'yydev_notes_save_dashboard_data' function in all versions up to, and including, 1.3.4. This makes it possible for authenti…

    yydevelopment Page & Post Notes Web / CMS
  • Medium 4.3
    CVE-2025-58622

    WordPress Mobile Contact Line Plugin <= 2.4.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in yydevelopment Mobile Contact Line mobile-contact-line allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile Contact Line: from n/a through <= 2.4.0.

    yydevelopment Mobile Contact Line
  • Medium 5.9
    CVE-2023-41733

    WordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions.

    yydevelopment Back To The Top Button