Skip to content
OpenAdvisories

Vendor

pebas

8 known vulnerabilities.

Products

CouponXxL 3 Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme 2 CouponXL 1 CouponXxL Custom Post Types 1 Lisfinity Core 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-22484

    WordPress Lisfinity Core plugin <= 1.5.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This issue affects Lisfinity Core: from n/a through <= 1.5.0.

    pebas Lisfinity Core
  • Critical 9.8
    CVE-2025-60220

    WordPress CouponXxL theme <= 3.0.0 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0.

    pebas CouponXxL
  • Critical 9.8
    CVE-2025-52725

    WordPress CouponXxL theme <= 3.0.0 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in pebas CouponXxL couponxxl allows Object Injection.This issue affects CouponXxL: from n/a through <= 3.0.0.

    pebas CouponXxL
  • Critical 9.8
    CVE-2025-39489

    WordPress CouponXL theme <= 4.5.0 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in pebas CouponXL couponxl allows Privilege Escalation.This issue affects CouponXL: from n/a through <= 4.5.0.

    pebas CouponXL