All 2 CVE vulnerabilities found in Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme, with AI-generated Chinese analysis, references, and POCs.
Vendor: pebas
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-6042 | Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Unauthenticated Privilege Escalation to Editor CWE-269 | 7.3 | High | 2025-10-15 |
| CVE-2025-6038 | Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Authenticated (Subscriber+) Privilege Escalation CWE-639 | 8.8 | High | 2025-10-09 |
All 2 known CVE vulnerabilities affecting Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme with full Chinese analysis, references, and POCs where available.