https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-62969.htmlhttps://patchthecve.com/cve/CVE-2025-62969.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Stored XSS.This issue affects NextMove Lite: from n/a through <= 2.23.0.https://patchthecve.com/cve/CVE-2024-10860.htmlhttps://patchthecve.com/cve/CVE-2024-10860.htmlWed, 17 Jun 2026 06:56:35 +0000MEDIUM 4.3: The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized submission of data due to a missing capability check on the _submit_uninstall_reason_action() function in all versions up to, and including, 2.19.0. This makes it possible for authenticated attackerhttps://patchthecve.com/cve/CVE-2024-25092.htmlhttps://patchthecve.com/cve/CVE-2024-25092.htmlWed, 17 Jun 2026 07:15:29 +0000HIGH 8.8: Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0.https://patchthecve.com/cve/CVE-2024-32104.htmlhttps://patchthecve.com/cve/CVE-2024-32104.htmlWed, 17 Jun 2026 07:29:17 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.18.1.