WordPress permalink-manager-lite has 6 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-0201 | The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escap | medium | 6.1 | <2.2.15 | 2.2.15 |
| CVE-2021-24769 | The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before using it in a SQL stat | high | 7.2 | <2.2.13.1 | 2.2.13.1 |
| CVE-2022-41781 | Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress. | medium | 6.5 | <2.2.20.1 | 2.2.20.1 |
| CVE-2024-2543 | The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_u | medium | 4.3 | <2.4.3.2 | 2.4.3.2 |
| CVE-2024-2538 | The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the | medium | 5.4 | <2.4.3.2 | 2.4.3.2 |
| CVE-2022-4021 | The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This | high | 8.8 | <2.2.20.2 | 2.2.20.2 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked