A vulnerability classified as critical has been found in Permalink Plugin up to 2.4.3.1 on WordPress. Affected is the function get_uri_editor. The manipulation leads to missing authorization.

This vulnerability is traded as CVE-2024-2543. It is possible to launch the attack remotely. There is no exploit available.