mbis vulnerabilities
8 published CVEs name mbis among the affected products.
- 8Published CVEs8 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-122222
Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug
mbis · Permalink Manager Lite
Medium6.4 - CVE-2026-8494
Permalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
mbis · Permalink Manager Lite
Medium6.4 - CVE-2024-8195
Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure
mbis · Permalink Manager Lite
Medium5.3 - CVE-2024-2543
Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor
mbis · Permalink Manager Lite
Medium4.3 - CVE-2024-2738
Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting
mbis · Permalink Manager Lite
Medium6.1 - CVE-2024-2538
Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification
mbis · Permalink Manager Lite
Medium5.4 - CVE-2022-4410
Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting
mbis · Permalink Manager Lite
Medium6.4 - CVE-2022-4021
Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery
mbis · Permalink Manager Lite
High8.8