mbis

Products

ProductCVEsExploitedLatest
Permalink Manager Lite7–Jun 17, 2026
Permalink Manager Pro1–Apr 9, 2024

Exploited and recent CVEs

  • CVE-2026-8494 Medium 6.4 Permalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title 0.3%
  • CVE-2024-8195 Medium 5.3 Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure 0.5%
  • CVE-2024-2543 Medium 4.3 Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor 0.6%
  • CVE-2024-2738 Medium 6.1 Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting 0.6%
  • CVE-2024-2738 Medium 6.1 Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting 0.6%
  • CVE-2024-2538 Medium 5.4 Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification 0.6%
  • CVE-2022-4410 Medium 6.4 Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting 0.6%
  • CVE-2022-4021 High 8.8 Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery 0.5%