Plugin icon

Permalink Manager Lite

permalink-manager

Vulnerabilities:

12

Last Updated:

March 11, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-09-06
Title
Permalink Manager Lite < 2.5.1.4 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 2.5.1.4
CVSS
5.3 (medium)
Published
2024-08-27
Title
Permalink Manager Lite < 2.4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 2.4.4.1
CVSS
5.3 (medium)
Published
2024-06-27
Title
Permalink Manager Lite < 2.4.3.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.4.3.4
CVSS
6.1 (medium)
Published
2024-03-20
Title
Permalink Manager Lite and Permalink Manager pro < 2.4.3.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.4.3.2
CVSS
6.1 (medium)
Published
2024-03-20
Title
Plugin Permalink < 2.4.3.2 - Missing Authorization via get_uri_editor
Fixed in
Fixed in 2.4.3.2
CVSS
4.3 (medium)
Published
2024-03-18
Title
Permalink Manager < 2.4.3.2 - Missing Authorization to Authenticated(Author+) arbitrary post slug modification
Fixed in
Fixed in 2.4.3.2
CVSS
5.4 (medium)
Published
2024-03-15
Title
Permalink Manager Lite < 2.4.3.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.4.3.1
CVSS
6.1 (medium)
Published
2022-12-14
Title
Permalink Manager Lite < 2.3.0 - Authenticated Stored XSS
Fixed in
Fixed in 2.3.0
CVSS
4.4 (medium)
Published
2022-11-16
Title
Permalink Manager Lite < 2.2.20.2 - Settings Update via CSRF
Fixed in
Fixed in 2.2.20.2
CVSS
4.3 (medium)
Published
2022-11-01
Title
Permalink Manager Lite < 2.2.20.1 - Unauthenticated URI Deletion
Fixed in
Fixed in 2.2.20.1
CVSS
6.5 (medium)
Published
2022-01-17
Title
Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.2.15
CVSS
6.1 (medium)
Published
2021-09-27
Title
Permalink Manager Lite < 2.2.13.1 - Admin+ SQL Injection
Fixed in
Fixed in 2.2.13.1
CVSS
6.8 (medium)