NextMove Lite
XLPlugins
Developer
2.24.0
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
1 present
7 patched
4 Mitigation rules
- Broken Access Control vulnerability<= 2.23.027/01/2026
- Insecure Direct Object References (IDOR) vulnerability<= 2.23.015/01/2026
- Cross Site Scripting (XSS) vulnerability<= 2.23.018/10/2025
- Cross Site Scripting (XSS) vulnerability<= 2.24.028/07/2025
- Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission vulnerability<= 2.19.028/02/2025
- Cross Site Request Forgery (CSRF) vulnerability<= 2.18.111/04/2024
- Missing Authorization to Unauthenticated System Information Disclosure vulnerability<= 2.18.001/03/2024
- Subscriber+ Arbitrary Plugin Installation/Activation vulnerability<= 2.17.009/02/2024