1.6.0

DATE	CVE	VULNERABILITY TITLE	RISK
2025-03-12	CVE-2024-12589	Cross-site Scripting vulnerability in Xlplugins Finale The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. network low complexity xlplugins CWE-79	5.4
2024-06-09	CVE-2024-30485	Unspecified vulnerability in Xlplugins Finale Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0. network low complexity xlplugins	8.8