Mbis Permalink Manager Lite vulnerabilities

• maciej bis permalink manager lite Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug CVE-2026-122222 6.4 MediumNovember 6, 2026
• maciej bis permalink manager lite Permalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title CVE-2026-8494 6.4 MediumJune 17, 2026
• maciej bis permalink manager lite, permalink manager lite project manager lite +1 more Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure CVE-2024-8195 5.3 MediumAugust 28, 2024
• maciej bis permalink manager lite, permalink manager lite project manager lite +1 more Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor CVE-2024-2543 4.3 MediumApril 9, 2024
• maciej bis permalink manager lite, mbis permalink manager pro, permalink manager lite project manager lite +1 more +3 more Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting CVE-2024-2738 6.1 MediumApril 9, 2024
• maciej bis permalink manager lite, permalink manager lite project manager lite +1 more Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification CVE-2024-2538 5.4 MediumMarch 20, 2024
• maciej bis permalink manager lite, permalink manager lite project manager lite +1 more Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting CVE-2022-4410 6.4 MediumDecember 14, 2022
• maciej bis permalink manager lite, permalink manager lite project manager lite +1 more Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery CVE-2022-4021 8.8 HighNovember 16, 2022