This vulnerability in Permalink Manager Lite arises from missing authorization checks, which can be exploited remotely without authentication or user interaction. It affects all versions before 2.5.3. The CVSS score of 5.3 reflects a network attack vector with low complexity and no privileges required, impacting confidentiality but not integrity or availability. The lack of patch links or vendor advisories means remediation status is unclear.

The vulnerability allows an attacker to bypass access controls, potentially exposing confidential information managed by the plugin. There is no indication of impact on integrity or availability. Exploitation does not require privileges or user interaction, increasing the risk of unauthorized data disclosure. However, no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor for updates from Maciej Bis and consider restricting access to the plugin's functionality where possible.