CVE-2025-59010: falha de alta gravidade em Maciej Bis Permalink Manager Lite
WordPress Permalink Manager Lite Plugin <= 2.5.1.3 - Sensitive Data Exposure Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.4%
Insertion of Sensitive Information Into Sent Data vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Retrieve Embedded Sensitive Data.This issue affects Permalink Manager Lite: from n/a through <= 2.5.1.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Maciej Bis · Permalink Manager LiteCVEs relacionadas — Maciej Bis Permalink Manager Lite
No mesmo produto, das mais perigosas para as menos.
CVE-2022-0201—Permalink Manager < 2.2.15 - Reflected Cross-Site ScriptingEPSS 3.4%CVE-2022-41781MEDIUMWordPress Permalink Manager Lite plugin <= 2.2.20 - Broken Access Control vulnerabilityEPSS 0.7%CVE-2024-29092HIGHWordPress Permalink Manager Lite plugin <= 2.4.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-37257HIGHWordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-32413MEDIUMWordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerabilityEPSS 0.2%