Vendor

XLPlugins

13 known vulnerabilities.

Products

NextMove Lite 6 Finale Lite 3 NextMove Lite – Thank You Page for WooCommerce 3 User Email Verification for WooCommerce 1

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 7.5

CVE-2025-68048

WordPress NextMove Lite plugin <= 2.23.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through <= 2.23.0.

XLPlugins NextMove Lite

Feb 20, 2026
High 7.1

CVE-2025-52735

WordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through <= 2.24.0.

XLPlugins NextMove Lite

Oct 22, 2025
High 8.8

CVE-2024-30485 Public exploit

WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0.

XLPlugins Finale Lite

Jun 9, 2024
High 8.8

CVE-2024-25092 Public exploit

WordPress NextMove Lite plugin <= 2.17.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0.

XLPlugins NextMove Lite

Jun 9, 2024
High 7.1

CVE-2023-39162

WordPress User Email Verification for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <= 3.5.0 versions.

XLPlugins User Email Verification for WooCommerce Web / CMS

Sep 4, 2023