Skip to content
PluginCanary

Permalink Manager Lite

by Maciej Bis · 100,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: 3 vulnerabilities published in the last 24 months.

87/ 100 Canary Score
Sub-scores for Permalink Manager Lite
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mbis9 Jan 2016 to 13 Oct 2026, 454 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
22 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
5.4 supported 8.2+
Releases per quarter for Permalink Manager Lite
Q1 202410
Q2 20242
Q3 20243
Q4 20242
Q1 20253
Q2 20251
Q3 20252
Q4 20253
Q1 20265
Q2 20262
Q3 20263
Q4 20261

Last release 13 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
16 Jun 2026Permalink Manager Lite <= 2.5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title6.4<= 2.5.3.32.5.3.40
25 Feb 2026Permalink Manager Lite < 2.5.3 - Missing Authorization5.3< 2.5.32.5.30
6 Sep 2025Permalink Manager Lite <= 2.5.1.3 - Unauthenticated Sensitive Information Exposure5.3<= 2.5.1.32.5.1.40
27 Aug 2024Permalink Manager Lite <= 2.4.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure5.3<= 2.4.42.4.4.11
27 Jun 2024Permalink Manager Lite <= 2.4.3.3 - Reflected Cross-Site Scripting6.1<= 2.4.3.32.4.3.427
20 Mar 2024Plugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor4.3<= 2.4.3.12.4.3.237
20 Mar 2024Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting6.1<= 2.4.3.12.4.3.237
18 Mar 2024Permalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification5.4<= 2.4.3.12.4.3.239
15 Mar 2024Permalink Manager Lite <= 2.4.3 - Reflected Cross-Site Scripting6.1<= 2.4.32.4.3.13
14 Dec 2022Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting6.4<= 2.2.20.32.3.061
16 Nov 2022Permalink Manager Lite <= 2.2.20.1 - Cross-Site Request Forgery8.8<= 2.2.20.12.2.20.2n/a
1 Nov 2022Permalink Manager Lite <= 2.2.20 - Missing Authorization6.5<= 2.2.202.2.20.114
17 Jan 2022Permalink Manager Lite <= 2.2.14 Reflected Cross-Site Scripting6.1< 2.2.152.2.15n/a
27 Sep 2021Permalink Manager Lite <= 2.2.12 - Admin+ SQL Injection7.2<= 2.2.122.2.13.1842

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Permalink Manager Lite
Q4 20233.8
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q1 20265.0

Average rating rose from 3.8 to 5.0 between Q4 2023 and Q1 2026.

Rating distribution
5 star162
4 star3
3 star2
2 star0
1 star9
Latest low reviews

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Permalink Manager Lite
4 May 202616,978
11 May 202635,497
18 May 202616,697
25 May 20266,738
1 Jun 20265,876
8 Jun 20264,286
15 Jun 20265,443
22 Jun 20263,857
29 Jun 20263,254
6 Jul 202641,878
13 Jul 20267,429
20 Jul 20266,448
27 Jul 20265,823
3 Aug 202644,319
10 Aug 202643,539
17 Aug 20267,926
24 Aug 20266,013
31 Aug 20265,643
7 Sep 20264,131
14 Sep 20264,051
21 Sep 20263,965
28 Sep 20263,755
5 Oct 20263,866
12 Oct 202633,559
19 Oct 202612,002
26 Oct 202614,089
2 Nov 20261,114

Weekly downloads over the last 4 weeks are 18% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

RedirectionScore 93 · 100,000+Redirect 404 to HomepageScore 93 · 60,000+Remove Category URL - Remove ‘category’ base from category permalinksScore 93 · 40,000+301 Redirects - Redirect ManagerScore 92 · 300,000+404 to 301 - Redirect Manager, 301 Redirection, 404 Error Logs & 404 MonitoringScore 92 · 100,000+

Facts

Version2.6.1
AuthorMaciej Bis
Added9 Jan 2016
Last updated13 Oct 2026
Active installs100,000+
Requires WordPress5.3.0
Tested up to7.1.4
Requires PHP5.4
CategorySite Administration & Utilities > URL Redirects & 301 Management
Tagspermalink, permalinks, custom permalink, custom permalinks, woocommerce permalinks

Questions

Is Permalink Manager Lite still maintained?

Permalink Manager Lite was last updated on 13 Oct 2026. Its Canary status is Healthy.

Is Permalink Manager Lite safe?

Permalink Manager Lite has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Permalink Manager Lite?

The wordpress.org author is Maciej Bis. Recent committers: mbis, plugin-master. We have recorded no ownership change.

What can I use instead of Permalink Manager Lite?

Plugins in the same category with a higher Canary Score: Redirection, Redirect 404 to Homepage, Remove Category URL - Remove ‘category’ base from category permalinks, 301 Redirects - Redirect Manager, 404 to 301 - Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue