Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-32413 EUVD-2026-11931GHSA-2vm4-q57w-7x2c

WordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Maciej Bis Product: Permalink Manager Lite

Description

Missing Authorization vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Permalink Manager Lite: from n/a through < 2.5.3.

Affected products

VendorProductAffectedFixed
Maciej Bis Permalink Manager Lite ≤ 2.5.3 —

References