Permalink Manager Lite (Permalink Manager Lite Project) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 145 known versions, newest CVE from 2024-08-28. Vendor: Permalink Manager Lite Project.
CVEs of Permalink Manager Lite
- CVE-2024-8195 - CVSS 5.3 (medium), 2024-08-28: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data',…
- CVE-2024-37257 - CVSS 7.1 (high), 2024-07-22: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Maciej Bis Permalink Manager Lite allows…
- CVE-2024-2738 - CVSS 6.1 (medium), 2024-04-09: The Permalink Manager Lite and Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in multiple instances in all…
- CVE-2024-2543 - CVSS 4.3 (medium), 2024-04-09: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_uri_editor'…
- CVE-2024-2538 - CVSS 5.4 (medium), 2024-03-20: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
- CVE-2024-29092 - CVSS 7.1 (high), 2024-03-19: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maciej Bis Permalink Manager Lite allows Reflected…
- CVE-2022-4410 - CVSS 6.4 (medium), 2022-12-14: The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output…
- CVE-2022-41781 - CVSS 9.8 (critical), 2022-11-18: Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress.
- CVE-2022-4021 - CVSS 8.8 (high), 2022-11-16: The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This is due to missing…
- CVE-2022-0201 - CVSS 6.1 (medium), 2022-02-14: The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters…
- CVE-2021-24769 - CVSS 7.2 (high), 2021-10-25: The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before using it in a SQL statement in the…
