Skip to content
PluginCanary

NextMove Lite

by XLPlugins · 10,000+ active installs · Checked 4 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

71/ 100Watch
Canary Score

Based on 3 of 5 areas

Sub-scores for NextMove Lite
Ownership100
Maintenance50
Security70
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 9 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is NextMove Lite still maintained?
Yes. Last release 14 Mar 2026, 5 releases in the last 24 months. 14 Mar 2026 · wordpress.org
Who owns NextMove Lite, and has it changed hands?
No change recorded. Main committer amans2k since Sep 2017. 4 Nov 2026 · SVN log
Was NextMove Lite removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is NextMove Lite safe?
9 known vulnerabilities, all fixed (latest in 2.24.0). Not on the exploited list. 1 May 2026 · Wordfence Intelligence
Is the latest NextMove Lite update safe to install?
No ownership change before 2.24.0. No one-star spike after it. 14 Mar 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
amans2k22 Sep 2017 to 14 Mar 2026, 104 commits

1 committer recorded. No ownership changes recorded since 2017.

Maintenance

Last release
8 months ago
Releases, 24 months
5
Tested up to
6.9 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for NextMove Lite
Q1 20244
Q2 20240
Q3 20241
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20253
Q1 20261
Q2 20260
Q3 20260
Q4 20260

Last release 14 Mar 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Support

Resolved, last 2 months
0%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

6 vulnerabilities in 24 months (9 on record), all patched (latest fixed in 2.24.0).

Show 9 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
1 May 2026Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode6.4<= 2.23.02.24.0Before disclosure
27 Jan 2026Missing Authorization5.3<= 2.23.02.24.047
15 Jan 2026Unauthenticated Insecure Direct Object Reference5.3<= 2.23.02.24.059
18 Oct 2025Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.23.02.24.0148
28 Jul 2025Reflected Cross-Site Scripting6.1<= 2.21.0Not affectedn/a
27 Feb 2025Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission4.3<= 2.19.02.20.0Before disclosure
11 Apr 2024Cross-Site Request Forgery4.3<= 2.18.12.18.2Before disclosure
29 Feb 2024Missing Authorization to Unauthenticated System Information Disclosure5.3<= 2.18.02.18.1Same day
9 Feb 2024Missing Authorization to Authenticated(Subscriber+) Plugin Activation6.5<= 2.17.02.18.04

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Last 90 days vs lifetime average rating for NextMove Lite
Last 90 daysNo reviews
Lifetime4.7
Average rating per quarter
Average rating per quarter for NextMove Lite
Q4 20235.0
Q1 20245.0
Q2 20245.0
Q3 20243.7
Q4 20244.0
Q1 20255.0
Q2 20255.0
Q1 20265.0
Q2 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q2 2026.

Rating distribution
5 star135
4 star4
3 star1
2 star2
1 star8
Latest low reviews

Momentum

Active installs
10,000+
Downloads, last full week
478
Weekly downloads, last 26 complete weeks
Weekly downloads for NextMove Lite
4 May 2026179
11 May 2026465
18 May 20261,129
25 May 2026414
1 Jun 2026339
8 Jun 2026338
15 Jun 2026319
22 Jun 2026285
29 Jun 2026279
6 Jul 2026335
13 Jul 2026225
20 Jul 2026293
27 Jul 2026326
3 Aug 2026356
10 Aug 2026300
17 Aug 2026299
24 Aug 2026292
31 Aug 2026309
7 Sep 2026315
14 Sep 2026340
21 Sep 2026334
28 Sep 2026314
5 Oct 2026413
12 Oct 2026423
19 Oct 2026491
26 Oct 2026478

Weekly downloads over the last 4 weeks are 22% above the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Preview E-mails for WooCommerceScore 95 · 20,000+PW WooCommerce Bulk EditScore 95 · 20,000+Stock Manager for WooCommerceScore 95 · 20,000+

Facts

Full name
NextMove Lite - Thank You Page for WooCommerce
Version
2.24.0
Author
XLPlugins
Added
17 Aug 2017
Last updated
14 Mar 2026
Active installs
10,000+
Requires WordPress
5.0
Tested up to
6.9.11
Requires PHP
7.4
Category
E-commerce & Shopping
Tags
woocommerce, woo thank you page, custom thank you page, WooCommerce Thank You, woocommerce thank you page

Other plugins by this author: XL NMI Gateway for WooCommerce

Questions about NextMove Lite

Is NextMove Lite still maintained?

Yes. Last release 14 Mar 2026, 5 releases in the last 24 months.

Who owns NextMove Lite, and has it changed hands?

No change recorded. Main committer amans2k since Sep 2017.

Was NextMove Lite removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is NextMove Lite safe?

9 known vulnerabilities, all fixed (latest in 2.24.0). Not on the exploited list.

Is the latest NextMove Lite update safe to install?

No ownership change before 2.24.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue