https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:39:19 +0000 https://cve.radiocsirt.org/vuln/cve-2024-1120 <p><strong>Affected:</strong> djeet Finale Lite – Sales Countdown Timer &amp; Discount for WooCommerce, xlplugins NextMove Lite – Thank You Page for WooCommerce, xlplugins nextmove_lite, xlplugins finale_lite</p> <p>The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer &amp; Discount for WooCommerce plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the download_tools_settings() function in all versions up to, and including, 2.17.0. This makes it possible for unauthenticated attackers to export system information that can aid attackers in an attack.</p> <p><strong>Affected:</strong> djeet Finale Lite – Sales Countdown Timer &amp; Discount for WooCommerce, xlplugins NextMove Lite – Thank You Page for WooCommerce, xlplugins nextmove_lite, xlplugins finale_lite</p> <p>The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer &amp; Discount for WooCommerce plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the download_tools_settings() function in all versions up to, and including, 2.17.0. This makes it possible for unauthenticated attackers to export system information that can aid attackers in an attack.</p> https://cve.radiocsirt.org/vuln/cve-2024-1120