Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme vulnerabilities

2 known vulnerabilities in Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme from Pebas. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Lisfinity Core - Lisfinity Core plugin used…: Improper Privilege Management

  CVE-2025-6042Oct 15, 2025Pebas

  The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.0. This is due to the plugin assigning the editor role by default. While l

• 8.8 High severity

  Lisfinity Core - Lisfinity Core plugin used…: Authorization Bypass Through User-Controlled Key

  CVE-2025-6038Oct 9, 2025Pebas

  The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password update in all versions up to, and including, 1.4.0. This is due to the plugin not properly validating a