CouponXxL

CouponXxL has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Deserialization Of Untrusted Data, Improper Privilege Management.

1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

All of these findings were reported by Bonds.

Strategic Overview

Avg CVSSHigh

8.0/ 10

Patch Coverage33%

Open

Fixed

Get automatic notifications for all CouponXxL vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2025-60220

CouponXxL <= 3.0.0 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

3 records


2025-09-22 00:00	CouponXxL <= 4.5.0 - Cross-Site Request Forgery CouponXxL <= 4.5.0	`CVE-2025-58013`	4.3 Medium	Bonds	No
2025-08-19 00:00	CouponXxL <= 3.0.0 - Unauthenticated Privilege Escalation CouponXxL <= 3.0.0	`CVE-2025-60220`	9.8 Critical	Bonds	No
2025-07-01 00:00	CouponXxL <= 3.0.0 - Unauthenticated PHP Object Injection CouponXxL <= 3.0.0	`CVE-2025-52725`	9.8 Critical	Bonds	Yes

Showing 1–3 of 3 reports