Read the docs

XLPlugins

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

XLPlugins records in CISA KEV

No XLPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nextmove 6 records MEDIUM Finale 5 records MEDIUM Woo-confirmation-email 1 record LOW

Records

6 records in Nextmove · all components

TI-2025-32785 CVE-2025-52735 · GHSA-7mvx-239j-ppv4

WordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00296 Published 2025-10-22 No fix listed CWE-79
TI-2024-01038 CVE-2024-1120 · GHSA-v7h7-mr96-qc8c

Missing authorization in djeet Finale Lite – Sales Countdown Timer & Discount for…

Priority LOW 31

The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00533 Published 2024-03-01 No fix listed CWE-862
TI-2025-39117 CVE-2025-62969 · GHSA-fgh4-qp5f-8j48

WordPress NextMove Lite plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Stored XSS.This issue affects NextMove Lite: from n/a…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-27 No fix listed CWE-79
TI-2024-10067 CVE-2024-10860 · GHSA-8929-x24h-jv8r

Missing authorization in XLPlugins NextMove Lite – Thank You Page for WooCommerce

Priority LOW 20

The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized submission of data due to a missing capability check on the _submit_uninstall_reason_action() function in all versions…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00268 Published 2025-02-28 No fix listed CWE-862
Open these records in search →