Pinyin Slugs

Pinyin Slugs has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Pinyin Slugs has a vendor fix available, so running the current release closes it.

All of these findings were reported by yuyudhn. Pinyin Slugs is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Pinyin Slugs vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-47511

Pinyin Slugs <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Pinyin Slugs banner
Latestv2.3.9

Pinyin Slugs

Pieter Bos

Author

Pieter Bos

5.0(8)
100/100
Last Updated
2026-08-18 (26d ago)
Active Installs
3,000+
Downloads
60,078
Requires WP
4.6+
Requires PHP
0+
Tested up to
WP 7.1
Created
2013-08-19 (13y ago)

Chinese characters don’t come out good in permalinks. Without the Pinyin Slugs plugin activated, the example post I made for the screenshot will get a slug like this: %e6%90%9c%e7%b4%a2%e5%bc%95%e6%93%8e%e4%bc%98%e5%8c%96. With the plugin the slug automatically becomes sousuoyinqingyouhua. Search engines such as Baidu cannot make much of the first slug, but they can handle pinyin perfectly, especially when it is written as one long string without hyphens or underscores. It is possible to limit the amount of characters in the slug. The default is 100, which should be plenty for most. The Pinyin Slugs plugin was forked from the Pinyin Permalinks plugin by user xiaole_tao as that project seemed abandoned. There have been many improvements since; read the changelog for details. I have decided to only support this plugin through Github. Therefore, if you have any questions, need help and/or want to make a feature request, please open an issue over at Github. You can also browse through open and closed issues to find what you are looking for and perhaps even help others. PLEASE DO NOT POST YOUR ISSUES VIA THE WORDPRESS FORUMS Thanks for your understanding and cooperation. WPML Compatible The Pinyin Slugs plugin has received the WPML Certification of Compatibility and is featured on the WPML website with the article How to Build a WordPress Website in China and Reach an International Audience.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C