XLPlugins NextMove Lite – Thank You Page for WooCommerce

• CVE-2026-0703 Medium 6.4 NextMove Lite - Thank You Page for WooCommerce <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode 0.2%
• CVE-2024-10860 Medium 4.3 NextMove Lite – Thank You Page for WooCommerce <= 2.19.0 - Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission 0.3%
• CVE-2024-1120 Medium 5.3 NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure 0.5%