Pebas vulnerabilities
We track 8 vulnerabilities in Pebas products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
Latest Pebas vulnerabilities
- 9.3 Critical severity
Lisfinity Core: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This issue affects Lisfinity Core: from n/a through <= 1.5.0.
- 9.8 Critical severity
CouponXxL: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0.
- 7.3 High severity
Lisfinity Core - Lisfinity Core plugin used…: Improper Privilege Management
The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.0. This is due to the plugin assigning the editor role by default. While l
- 8.8 High severity
Lisfinity Core - Lisfinity Core plugin used…: Authorization Bypass Through User-Controlled Key
The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password update in all versions up to, and including, 1.4.0. This is due to the plugin not properly validating a
- 8.8 High severity
CouponXxL: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 4.5.0.
- 8.6 High severity
CouponXxL Custom Post Types: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in pebas CouponXxL Custom Post Types couponxxl-cpt allows Privilege Escalation.This issue affects CouponXxL Custom Post Types: from n/a through <= 3.0.
- 9.8 Critical severity
CouponXxL: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in pebas CouponXxL couponxxl allows Object Injection.This issue affects CouponXxL: from n/a through <= 3.0.0.
- 9.8 Critical severity
CouponXL: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in pebas CouponXL couponxl allows Privilege Escalation.This issue affects CouponXL: from n/a through <= 4.5.0.