CVE-2024-1120

The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the downloadtoolssettings function in all versions up to, and including,...

PT-2024-16817

Name of the Vulnerable Software and Affected Versions The NextMove Lite – Thank You Page for WooCommerce versions prior to 2.18.0 Finale Lite – Sales Countdown Timer & Discount for WooCommerce versions prior to 2.18.0 Description The issue is related to a missing capability check on the download...