NextMove Lite – Thank You Page for WooCommerce, CVE-2024-10860

CVE, Research URL: CVE-2024-10860
Home page URL: Security reports for NextMove Lite – Thank You Page for WooCommerce
Application: NextMove Lite – Thank You Page for WooCommerce
Published on: Feb 28, 2025
Research Description: The NextMove Lite – Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized submission of data due to a missing capability check on the _submit_uninstall_reason_action() function in all versions up to, and including, 2.19.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit a deactivation reason on behalf of a site.
Affected versions: max 2.20.0.
Status: vulnerable

NextMove Lite &#8211; Thank You Page for WooCommerce, CVE-2024-10860