Approved changes feed: RSS · Atom

cpe:2.3:a:permalink_manager_lite_project:permalink_manager_lite:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorPermalink Manager Lite Project (c7c5522f-2252-5c5c-9609-ec1bd201a348)
ProductPermalink Manager Lite (8232a74e-14a3-52ef-b4ac-bf43f0f8150c)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8195 vulnerable 2026-06-08 07:00:23.026605 Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure
MEDIUM (5.3)
The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data', 'debug_query', and 'debug_redirect' functions in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to extract sensitive data including password, title, and content of password-protected posts.
Published: 2024-08-28T13:54:28.403Z
Updated: 2026-04-08T17:14:29.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.