Mbis

7 CVEs across 2 Mbis products. Browse Mbis vulnerabilities, severities, and proof-of-concept exploits.

Mbis products with known CVEs

ProductCVEs
Permalink Manager Lite7
Permalink Manager Pro1
Mbis CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-8494Medium6.42026-06-17The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in the admin URI Editor interface in all versions…
CVE-2024-8195Medium5.32024-08-28The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data', 'debug_quer…
CVE-2024-2738Medium6.12024-04-09The Permalink Manager Lite and Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in multiple instances in all ve…
CVE-2024-2543Medium4.32024-04-09The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_uri_editor' function…
CVE-2024-2538Medium5.42024-03-20The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_permalin…
CVE-2022-4410Medium6.42022-12-14The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output e…
CVE-2022-4021High8.82022-11-16The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This is due to missing…