Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
permalink-manager
WordPress
· Plugin
15 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug
CVE-2026-122222
permalink-manager
WordPress
Medium
Fix reported
2026-11-06
Permalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
CVE-2026-8494
permalink-manager
WordPress
Medium
Fix reported
2026-06-17
Permalink Manager Lite < 2.5.3 - Missing Authorization
CVE-2026-32413
permalink-manager
WordPress
Medium
Fix reported
2026-04-16
Permalink Manager Lite <= 2.5.1.3 - Unauthenticated Sensitive Information Exposure
CVE-2025-59010
permalink-manager
WordPress
Medium
Fix reported
2025-10-15
Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure
CVE-2024-8195
permalink-manager
WordPress
Medium
Fix reported
2024-08-28
Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor
CVE-2024-2543
permalink-manager
WordPress
Medium
Fix reported
2024-07-31
Permalink Manager Lite <= 2.4.3.3 - Reflected Cross-Site Scripting
CVE-2024-37257
permalink-manager
WordPress
Medium
Fix reported
2024-07-02
Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting
CVE-2024-2738
permalink-manager-pro
permalink-manager
WordPress
Medium
Fix reported
2024-05-31
Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting
CVE-2022-4410
permalink-manager
WordPress
Medium
Fix reported
2024-05-31
Permalink Manager Lite <= 2.4.3 - Reflected Cross-Site Scripting
CVE-2024-29092
permalink-manager
WordPress
Medium
Fix reported
2024-03-21
Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification
CVE-2024-2538
permalink-manager
WordPress
Medium
Fix reported
2024-03-20
Permalink Manager Lite <= 2.2.20 - Missing Authorization
CVE-2022-41781
permalink-manager
WordPress
Medium
Fix reported
2024-01-22
Permalink Manager Lite <= 2.2.14 Reflected Cross-Site Scripting
CVE-2022-0201
permalink-manager
WordPress
Medium
Fix reported
2024-01-22
Permalink Manager Lite <= 2.2.12 - Admin+ SQL Injection
CVE-2021-24769
permalink-manager
WordPress
High
Fix reported
2024-01-22
Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery
CVE-2022-4021
permalink-manager
WordPress
High
Fix reported
2024-01-22