CVE-2025-59010

Insertion of Sensitive Information Into Sent Data vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Retrieve Embedded Sensitive Data.This issue affects Permalink Manager Lite: from n/a through <= 2.5.1.3.

Score

CVSS 3.1 7.5 High

Status

Deferred - audit@patchstack.com

Published

2025-09-26

Last modified

2026-10-11

Weaknesses

CWE-201

Affected products

• Permalink Manager Lite (Maciej Bis)

References

• https://patchstack.com/database/Wordpress/Plugin/permalink-manager/vulnerability/wordpress-permalink-manager-lite-plugi…