Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

mbis

mbis Permalink Manager Lite vulnerabilities

8 published CVEs name mbis Permalink Manager Lite among the affected products.

Newest CVEs

  • CVE-2026-122222

    Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug

    mbis · Permalink Manager Lite

    Medium6.4
  • CVE-2026-8494

    Permalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title

    mbis · Permalink Manager Lite

    Medium6.4
  • CVE-2024-8195

    Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    mbis · Permalink Manager Lite

    Medium5.3
  • CVE-2024-2543

    Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor

    mbis · Permalink Manager Lite

    Medium4.3
  • CVE-2024-2738

    Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting

    mbis · Permalink Manager Lite

    Medium6.1
  • CVE-2024-2538

    Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification

    mbis · Permalink Manager Lite

    Medium5.4
  • CVE-2022-4410

    Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting

    mbis · Permalink Manager Lite

    Medium6.4
  • CVE-2022-4021

    Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery

    mbis · Permalink Manager Lite

    High8.8