A vulnerability classified as critical has been found in Permalink Plugin up to 2.4.3.1 on WordPress. Affected is the function
get_uri_editor
. The manipulation leads to missing authorization.
This vulnerability is traded as CVE-2024-2543. It is possible to launch the attack remotely. There is no exploit available.