CVE-2026-49067: Yydevelopment Advanced 301 And 302 Redirect

Critical severity, CVSS 9.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.

Affected products

• Yydevelopment Advanced 301 And 302 Redirect: up to and including 1.6.9

Published 2026-06-15. Last modified 2026-06-17.