VendorsXLPluginsnextmoveall versions
Vulnerabilities

XLPlugins NextMove

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-25092
WordPress NextMove Lite plugin <= 2.17.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability
Published 2024-06-09 · Modified
8.8EPSS 0.014
CVE-2025-52735
WordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability
Published 2025-10-22 · Modified
7.1EPSS 0.003
CVE-2025-62969
WordPress NextMove Lite plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability
Published 2025-10-27 · Modified
6.5EPSS 0.002
CVE-2024-1120
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
Published 2024-03-01 · Modified
5.3EPSS 0.005
CVE-2024-32104
WordPress NextMove Lite plugin <= 2.18.1 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-04-15 · Modified
4.3EPSS 0.007
CVE-2024-10860
NextMove Lite – Thank You Page for WooCommerce <= 2.19.0 - Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission
Published 2025-02-28 · Analyzed
4.3EPSS 0.003