Xlplugins

Finale

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-12589

  • EPSS 0.03%
  • Published 12.03.2025 07:00:22
  • Last modified 02.04.2025 12:42:32

The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization...

8.8

CVE-2024-30485

  • EPSS 46.98%
  • Published 09.06.2024 11:15:51
  • Last modified 21.11.2024 09:12:01

Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0.

5.3

CVE-2024-1120

  • EPSS 0.25%
  • Published 01.03.2024 10:15:07
  • Last modified 11.03.2025 16:46:21

The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the download_tools_settings...