CrestaProject Attesa Extra

• CVE-2025-62971 Medium 6.5 WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-10688 Medium 4.3 Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure 0.3%