Lisfinity Core

Vulnerabilities 3Slug lisfinity-corePlugin page →

Minimum safe version

1.5.0

Update to 1.5.0 or later to address 2 fixable vulnerabilities

⚠ 1 vulnerability has no fix
Critical 9.3 Unfixed
2026-03-25≤ 1.5.0

WordPress Lisfinity Core plugin <= 1.5.0 - SQL Injection vulnerability

CVEWordfence
High 7.3
2025-10-14< 1.5.0

Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Unauthenticated Privilege Escalation to Editor

WordfenceCVE
High 8.8
2025-10-08< 1.5.0

WordPress Lisfinity Core Plugin <= 1.4.0 is vulnerable to Privilege Escalation

PatchstackWordfenceCVE