Pebas

8 CVEs across 5 Pebas products. Browse Pebas vulnerabilities, severities, and proof-of-concept exploits.

Pebas products with known CVEs

ProductCVEs
Couponxxl3
Lisfinity Core - Lisfinity Core Plugin Used For Pebas® Lisfinity WordPress Theme2
Couponxl1
Couponxxl Custom Post Types1
Lisfinity Core1
Pebas CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-22484Critical9.32026-03-25Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection…
CVE-2025-60220Critical9.82025-10-22Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0.
CVE-2025-6042High7.32025-10-15The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation in all versions…
CVE-2025-6038High8.82025-10-09The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password up…
CVE-2025-58013High8.82025-09-22Cross-Site Request Forgery (CSRF) vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 4.5…
CVE-2025-52726High8.62025-06-27Incorrect Privilege Assignment vulnerability in pebas CouponXxL Custom Post Types couponxxl-cpt allows Privilege Escalation.This issue affects CouponXxL Custom…
CVE-2025-52725Critical9.82025-06-27Deserialization of Untrusted Data vulnerability in pebas CouponXxL couponxxl allows Object Injection.This issue affects CouponXxL: from n/a through <= 3.0.0.
CVE-2025-39489Critical9.82025-05-23Incorrect Privilege Assignment vulnerability in pebas CouponXL couponxl allows Privilege Escalation.This issue affects CouponXL: from n/a through <= 4.5.0.