2.18.2

DATE	CVE	VULNERABILITY TITLE	RISK
2025-03-12	CVE-2024-12589	Cross-site Scripting vulnerability in Xlplugins Finale The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. network low complexity xlplugins CWE-79	5.4