Marco Milesi

Products

ProductCVEsExploitedLatest
ANAC XML Bandi di Gara4–Dec 18, 2025
Telegram Bot & Channel2–Jan 2, 2025
WP Attachments2–Dec 31, 2025
ANAC XML Viewer2–Jan 22, 2026
Browser Theme Color1–Jan 31, 2024
Amministrazione Trasparente1–Oct 24, 2023
WP Cloud1–Feb 3, 2025

Exploited and recent CVEs

  • CVE-2025-64252 Medium 4.9 WordPress ANAC XML Viewer plugin <= 1.8.2 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2025-62888 Medium 5.4 WordPress WP Attachments plugin <= 5.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-64260 High 7.1 WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-23819 High 7.5 WordPress WP Cloud plugin <= 1.4.3 - Arbitrary File Deletion vulnerability 0.6%
  • CVE-2024-38789 Medium 5.3 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-22291 Medium 4.3 WordPress Browser Theme Color Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-47655 Medium 5.4 WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-47242 Medium 6.5 WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-47245 Medium 5.9 WordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-47656 Medium 5.9 WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-45758 Medium 5.9 WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS) 0.5%
  • CVE-2023-45651 Medium 4.3 WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-34006 Medium 5.9 WordPress Telegram Bot & Channel Plugin <= 3.6.2 is vulnerable to Cross Site Scripting (XSS) 0.4%