Plugin icon

Finale Lite – Sales Countdown Timer & Discount for WooCommerce

finale-woocommerce-sales-countdown-timer-discount

Vulnerabilities:

7

Last Updated:

August 21, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2025-07-28
Title
Finale Lite <= 2.20.0 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)
Published
2025-03-11
Title
Finale Lite – Sales Countdown Timer & Discount for WooCommerce < 2.20.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Countdown Timer
Fixed in
Fixed in 2.20.0
CVSS
6.4 (medium)
Published
2024-04-11
Title
Finale Lite < 2.18.1 - Cross-Site Request Forgery
Fixed in
Fixed in 2.18.1
CVSS
5.8 (medium)
Published
2024-03-28
Title
Finale Lite < 2.18.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation
Fixed in
Fixed in 2.18.1
CVSS
5.4 (medium)
Published
2024-02-29
Title
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
Fixed in
Fixed in 2.18.0
CVSS
5.3 (medium)
Published
2023-10-31
Title
Finale Lite < 2.17.0 - Unauthenticated Arbitrary File Deletion
Fixed in
Fixed in 2.17.0
CVSS
7.5 (high)
Published
2019-05-29
Title
Finale WooCommerce Sale Countdown <= 2.9.0 - Arbitrary File Upload
Fixed in
Fixed in 2.9.1
CVSS
n/a