Plugin icon

NextMove Lite – Thank You Page for WooCommerce

woo-thank-you-page-nextmove-lite

Vulnerabilities:

9

Last Updated:

March 14, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-01
Title
NextMove Lite - Thank You Page for WooCommerce < 2.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode
Fixed in
Fixed in 2.24.0
CVSS
5.5 (medium)
Published
2026-01-27
Title
NextMove Lite < 2.24.0 - Missing Authorization
Fixed in
Fixed in 2.24.0
CVSS
5.3 (medium)
Published
2026-01-15
Title
NextMove Lite < 2.24.0 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 2.24.0
CVSS
5.3 (medium)
Published
2025-10-18
Title
NextMove Lite < 2.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.24.0
CVSS
5.5 (medium)
Published
2025-07-28
Title
NextMove Lite <= 2.21.0 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)
Published
2025-02-27
Title
NextMove Lite – Thank You Page for WooCommerce < 2.20.0 - Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission
Fixed in
Fixed in 2.20.0
CVSS
4.3 (medium)
Published
2024-04-11
Title
NextMove Lite < 2.18.2 - Cross-Site Request Forgery
Fixed in
Fixed in 2.18.2
CVSS
4.3 (medium)
Published
2024-02-29
Title
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
Fixed in
Fixed in 2.18.1
CVSS
5.3 (medium)
Published
2024-02-09
Title
NextMove Lite < 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation
Fixed in
Fixed in 2.18.0
CVSS
8.8 (high)