CVE-2026-22484: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This issue affects Lisfinity Core: from n/a through = 1.5.0...

PT-2025-43318

Name of the Vulnerable Software and Affected Versions CouponXxL versions through 3.0.0 Description A privilege assignment issue exists in pebas CouponXxL. This allows for privilege escalation. Recommendations Update CouponXxL to a version later than 3.0.0...

PT-2025-27120

Name of the Vulnerable Software and Affected Versions: pebas CouponXxL versions 3.0.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 3.0.0 and earlier, update to a version that fixes this issue, as n...

PT-2025-27121

Name of the Vulnerable Software and Affected Versions: pebas CouponXxL Custom Post Types versions 3.0 and earlier Description: The issue is related to an Incorrect Privilege Assignment vulnerability that allows Privilege Escalation in pebas CouponXxL Custom Post Types. Recommendations: For versio...

PT-2025-22702 · Pebas · Pebas Couponxl

Name of the Vulnerable Software and Affected Versions: pebas CouponXL versions n/a through 4.5.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in pebas CouponXL. Recommendations: For versions n/a through 4.5.0, update to a...