VendorsXLPluginsfinaleany version
Vulnerabilities

XLPlugins Finale Lite Edition any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2024-30485
WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability
Published 2024-06-09 · Modified
8.8EPSS 0.010
CVE-2023-47180
WordPress Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin <= 2.16.0 - Arbitrary Content Deletion vulnerability
Published 2025-01-02 · Modified
6.5EPSS 0.004
CVE-2024-12589
Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.19.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Countdown Timer
Published 2025-03-12 · Analyzed
6.4EPSS 0.003
CVE-2024-1120
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
Published 2024-03-01 · Modified
5.3EPSS 0.005
CVE-2024-32107
WordPress Finale Lite plugin <= 2.18.0 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-04-11 · Modified
4.3EPSS 0.002