pebas
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CouponXxL | 3 | – | Oct 22, 2025 |
| Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme | 2 | – | Oct 15, 2025 |
| CouponXL | 1 | – | May 23, 2025 |
| CouponXxL Custom Post Types | 1 | – | Jun 27, 2025 |
| Lisfinity Core | 1 | – | Mar 25, 2026 |
Exploited and recent CVEs
- CVE-2026-22484 WordPress Lisfinity Core plugin <= 1.5.0 - SQL Injection vulnerability 0.4%
- CVE-2025-60220 WordPress CouponXxL theme <= 3.0.0 - Privilege Escalation vulnerability 0.5%
- CVE-2025-6042 Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Unauthenticated Privilege Escalation to Editor 0.2%
- CVE-2025-6038 Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Authenticated (Subscriber+) Privilege Escalation 0.3%
- CVE-2025-58013 WordPress CouponXxL Theme <= 4.5.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
- CVE-2025-52725 WordPress CouponXxL theme <= 3.0.0 - PHP Object Injection Vulnerability 0.5%
- CVE-2025-52726 WordPress CouponXxL Custom Post Types plugin <= 3.0 - Privilege Escalation Vulnerability 0.3%
- CVE-2025-39489 WordPress CouponXL theme <= 4.5.0 - Privilege Escalation Vulnerability 0.5%