Advisories · Technology

Maciej Bis Permalink Manager Lite.

Every CVE that names Maciej Bis Permalink Manager Lite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-32413 CVE record

CVSS 5.3 Medium

WordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerability
- Maciej Bis Permalink Manager Lite
- Broken access control
Not analysed yet 13 Mar 2026
CVE-2025-59010 CVE record

CVSS 7.5 High

WordPress Permalink Manager Lite Plugin <= 2.5.1.3 - Sensitive Data Exposure Vulnerability
- Maciej Bis Permalink Manager Lite
- Information disclosure
Not analysed yet 26 Sept 2025
CVE-2024-37257 CVE record

CVSS 7.1 High

WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Maciej Bis Permalink Manager Lite
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2024
CVE-2024-29092 CVE record

CVSS 7.1 High

WordPress Permalink Manager Lite plugin <= 2.4.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Maciej Bis Permalink Manager Lite
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2024
CVE-2022-41781 CVE record

CVSS 6.5 Medium

WordPress Permalink Manager Lite plugin <= 2.2.20 - Broken Access Control vulnerability
- Maciej Bis Permalink Manager Lite
- CWE-264
Not analysed yet 18 Nov 2022
CVE-2022-0201 CVE record

Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting
- Maciej Bis Permalink Manager Lite
- Maciej Bis Permalink Manager Pro
- Cross-site scripting (XSS)
Not analysed yet 14 Feb 2022