permalink_manager_lite vulnerabilities

CVEs whose affected-version data names the permalink_manager_lite package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-122222Medium· 6.4

yesterday

Permalink Manager Lite <= 2.6.1 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slug' parameter in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping. This makes it p…

▾ Sunlitmbis · Permalink Manager LiteEPSS 0.19%via CVEORG