Finale Lite

Daman Jeet

Developer

2.20.0

Latest version

5,000

Installations

No date

Last updated

WordPress Plugin

Active VDP

Report vulnerability

Vulnerabilities

Security Policy

Security Contributors

Vulnerability history

1 present

6 fixed

4 Mitigation rules

Cross Site Scripting (XSS) Vulnerability
<= 2.20.0
Jul 28, 2025
Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Countdown Timer vulnerability
<= 2.19.0
Mar 11, 2025
Cross Site Request Forgery (CSRF) vulnerability
<= 2.18.0
Apr 11, 2024
Subscriber+ Arbitrary Plugin Installation/Activation vulnerability
<= 2.18.0
Mar 28, 2024
Missing Authorization to Unauthenticated System Information Disclosure vulnerability
<= 2.17.0
Mar 1, 2024
Arbitrary Content Deletion vulnerability
<= 2.16.0
Oct 31, 2023
Arbitrary File Upload vulnerability
<= 2.9.0
Jun 16, 2019