Browse CVEs

MEDIUM 6.5 CVE-2025-62969 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-next… Nextmove after 2.23.0 Fix from $1,6002025-10-27 HIGH 7.1 CVE-2025-52735 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-next… Nextmove after 2.23.0 Fix from $1,9502025-10-22 MEDIUM 5.4 CVE-2024-12589 The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via th… Finale 2.20.0+ Fix from $1,6002025-03-12 MEDIUM 6.5 CVE-2023-47180 Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… Finale 2.17.0+ Fix from $1,6002025-01-02 HIGH 8.8 CVE-2024-30485 Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0. Finale 2.18.1+ Fix from $1,9502024-06-09 HIGH 8.8 CVE-2024-25092 Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0. Nextmove 2.18.0+ Fix from $1,9502024-06-09 MEDIUM 5.3 CVE-2024-1120 The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugins for WordPress are vulne… Finale 2.18.0 / 2.18.1+ Fix from $1,6002024-03-01 MEDIUM 6.1 CVE-2023-39162 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <= 3.5.0 versions. Woo Confirmation Email after 3.5.0 Fix from $1,6002023-09-04