https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-8195.htmlhttps://patchthecve.com/cve/CVE-2024-8195.htmlWed, 17 Jun 2026 08:22:05 +0000MEDIUM 5.3: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data', 'debug_query', and 'debug_redirect' functions in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to extrahttps://patchthecve.com/cve/CVE-2024-37257.htmlhttps://patchthecve.com/cve/CVE-2024-37257.htmlWed, 17 Jun 2026 07:38:01 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3.https://patchthecve.com/cve/CVE-2024-2738.htmlhttps://patchthecve.com/cve/CVE-2024-2738.htmlWed, 17 Jun 2026 07:25:26 +0000MEDIUM 6.1: The Permalink Manager Lite and Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in multiple instances in all versions up to, and including, 2.4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated ahttps://patchthecve.com/cve/CVE-2024-2543.htmlhttps://patchthecve.com/cve/CVE-2024-2543.htmlWed, 17 Jun 2026 07:24:44 +0000MEDIUM 4.3: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_uri_editor' function in all versions up to, and including, 2.4.3.1. This makes it possible for unauthenticated attackers to view the permalinks of all posts.https://patchthecve.com/cve/CVE-2024-2538.htmlhttps://patchthecve.com/cve/CVE-2024-2538.htmlWed, 17 Jun 2026 07:24:44 +0000MEDIUM 5.4: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_permalink' function in all versions up to, and including, 2.4.3.1. This makes it possible for authenticated attackers, with author access and above, https://patchthecve.com/cve/CVE-2024-29092.htmlhttps://patchthecve.com/cve/CVE-2024-29092.htmlWed, 17 Jun 2026 07:22:24 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.