What’s Vulnerable › Products
mbis Permalink Manager Lite vulnerabilities
14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your mbis Permalink Manager Lite version is affected
Latest mbis Permalink Manager Lite vulnerabilities
- CVE-2026-8494 — Permalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title (CVSS 6.4)
- CVE-2026-32413 — WordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2025-59010 — WordPress Permalink Manager Lite Plugin <= 2.5.1.3 - Sensitive Data Exposure Vulnerability (CVSS 7.5)
- CVE-2024-8195 — Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure (CVSS 5.3)
- CVE-2024-37257 — WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-2738 — Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2024-2543 — Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor (CVSS 4.3)
- CVE-2024-2538 — Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification (CVSS 4.3)
- CVE-2024-29092 — WordPress Permalink Manager Lite plugin <= 2.4.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2022-4410 — Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2022-41781 — WordPress Permalink Manager Lite plugin <= 2.2.20 - Broken Access Control vulnerability (CVSS 9.8)
- CVE-2022-4021 — Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery (CVSS 4.3)
- CVE-2022-0201 — Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-24769 — Permalink Manager Lite < 2.2.13.1 - Admin+ SQL Injection (CVSS 7.2)