GCVE - cpe:2.3:a:pebas:couponxxl:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pebas:couponxxl:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Pebas (`76bea6d5-7111-52ee-a51a-6124ded37f9c`)
Product	Couponxxl (`fd0f8781-381c-5e7b-9981-144bbdb009c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-60220`	vulnerable	2026-06-08 07:37:26.783907	WordPress CouponXxL theme <= 3.0.0 - Privilege Escalation vulnerability CRITICAL (9.8) Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0. Published: 2025-10-22T14:32:44.897Z Updated: 2026-04-28T18:42:14.027Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/couponxxl/vulnerability/wordpress-couponxxl-theme-3-0-0-privilege-escalation-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58013`	vulnerable	2026-06-08 07:35:16.849483	WordPress CouponXxL Theme <= 4.5.0 - Cross Site Request Forgery (CSRF) Vulnerability HIGH (8.8) Cross-Site Request Forgery (CSRF) vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 4.5.0. Published: 2025-09-22T18:24:06.573Z Updated: 2026-04-28T16:13:40.698Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/couponxxl/vulnerability/wordpress-couponxxl-theme-4-5-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52725`	vulnerable	2026-06-08 07:31:12.880573	WordPress CouponXxL theme <= 3.0.0 - PHP Object Injection Vulnerability CRITICAL (9.8) Deserialization of Untrusted Data vulnerability in pebas CouponXxL couponxxl allows Object Injection.This issue affects CouponXxL: from n/a through <= 3.0.0. Published: 2025-06-27T11:52:26.104Z Updated: 2026-04-28T16:13:17.587Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/couponxxl/vulnerability/wordpress-couponxxl-3-0-0-php-object-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.