Vulnerabilities > Xlplugins > Nextmove > 2.14.1

DATE CVE VULNERABILITY TITLE RISK
2025-02-28 CVE-2024-10860 Missing Authorization vulnerability in Xlplugins Nextmove
The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized submission of data due to a missing capability check on the _submit_uninstall_reason_action() function in all versions up to, and including, 2.19.0.
network
low complexity
xlplugins CWE-862
4.3
4.3
2024-06-09 CVE-2024-25092 Missing Authorization vulnerability in Xlplugins Nextmove
Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0.
network
low complexity
xlplugins CWE-862
8.8
8.8