https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-62969.htmlhttps://patchthecve.com/cve/CVE-2025-62969.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Stored XSS.This issue affects NextMove Lite: from n/a through <= 2.23.0.https://patchthecve.com/cve/CVE-2024-12589.htmlhttps://patchthecve.com/cve/CVE-2024-12589.htmlWed, 17 Jun 2026 07:00:00 +0000MEDIUM 6.4: The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. This makes it possible for ahttps://patchthecve.com/cve/CVE-2024-10860.htmlhttps://patchthecve.com/cve/CVE-2024-10860.htmlWed, 17 Jun 2026 06:56:35 +0000MEDIUM 4.3: The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized submission of data due to a missing capability check on the _submit_uninstall_reason_action() function in all versions up to, and including, 2.19.0. This makes it possible for authenticated attackerhttps://patchthecve.com/cve/CVE-2023-47180.htmlhttps://patchthecve.com/cve/CVE-2023-47180.htmlWed, 17 Jun 2026 06:32:17 +0000MEDIUM 6.5: Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale Lite: from n/a through 2.16.0.https://patchthecve.com/cve/CVE-2024-30485.htmlhttps://patchthecve.com/cve/CVE-2024-30485.htmlWed, 17 Jun 2026 07:27:03 +0000HIGH 8.8: Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0.https://patchthecve.com/cve/CVE-2024-25092.htmlhttps://patchthecve.com/cve/CVE-2024-25092.htmlWed, 17 Jun 2026 07:15:29 +0000HIGH 8.8: Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0.https://patchthecve.com/cve/CVE-2024-32104.htmlhttps://patchthecve.com/cve/CVE-2024-32104.htmlWed, 17 Jun 2026 07:29:17 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.18.1.https://patchthecve.com/cve/CVE-2024-32107.htmlhttps://patchthecve.com/cve/CVE-2024-32107.htmlWed, 17 Jun 2026 07:29:17 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0.