Skip to content
OpenAdvisories

Vendor

Marco Milesi

13 known vulnerabilities.

Products

ANAC XML Bandi di Gara 4 ANAC XML Viewer 2 Telegram Bot & Channel 2 WP Attachments 2 Browser Theme Color 1 Amministrazione Trasparente 1 WP Cloud 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-64252

    WordPress ANAC XML Viewer plugin <= 1.8.2 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through <= 1.8.2.

    Marco Milesi ANAC XML Viewer
  • Medium 5.4
    CVE-2025-62888

    WordPress WP Attachments plugin <= 5.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attachments: from n/a through <= 5.2.

    Marco Milesi WP Attachments
  • Medium 5.3
    CVE-2024-38789

    WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through <= 3.8.2.

    Marco Milesi Telegram Bot & Channel
  • Medium 4.3
    CVE-2024-22291

    WordPress Browser Theme Color Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Color: from n/a through 1.3.

    Marco Milesi Browser Theme Color
  • Medium 5.4
    CVE-2023-47655

    WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi ANAC XML Bandi di Gara.This issue affects ANAC XML Bandi di Gara: from n/a through 7.5.

    Marco Milesi ANAC XML Bandi di Gara
  • Medium 6.5
    CVE-2023-47242

    WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.

    Marco Milesi ANAC XML Bandi di Gara
  • Medium 5.9
    CVE-2023-47245

    WordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions.

    Marco Milesi ANAC XML Viewer
  • Medium 5.9
    CVE-2023-47656

    WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)

    Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.

    Marco Milesi ANAC XML Bandi di Gara
  • Medium 5.9
    CVE-2023-45758

    WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Amministrazione Trasparente plugin <= 8.0.2 versions.

    Marco Milesi Amministrazione Trasparente
  • Medium 4.3
    CVE-2023-45651

    WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: from n/a through 5.0.11.

    Marco Milesi WP Attachments
  • Medium 5.9
    CVE-2023-34006

    WordPress Telegram Bot & Channel Plugin <= 3.6.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Telegram Bot & Channel plugin <= 3.6.2 versions.

    Marco Milesi Telegram Bot & Channel