CyberSecBulletin

Xlplugins vulnerabilities

We track 2 vulnerabilities in Xlplugins products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Xlplugins vulnerabilities

  • 7.5 High severity

    NextMove Lite: Missing Authorization

    CVE-2025-68048Xlplugins

    Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through <= 2.23.0.

  • 7.1 High severity

    NextMove Lite: Improper Neutralization of Input During Web Page Generation

    CVE-2025-52735Xlplugins

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through <= 2.24.0.