Marco Milesi
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ANAC XML Bandi di Gara | 4 | – | Dec 18, 2025 |
| Telegram Bot & Channel | 2 | – | Jan 2, 2025 |
| WP Attachments | 2 | – | Dec 31, 2025 |
| ANAC XML Viewer | 2 | – | Jan 22, 2026 |
| Browser Theme Color | 1 | – | Jan 31, 2024 |
| Amministrazione Trasparente | 1 | – | Oct 24, 2023 |
| WP Cloud | 1 | – | Feb 3, 2025 |
Exploited and recent CVEs
- CVE-2025-64252 WordPress ANAC XML Viewer plugin <= 1.8.2 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2025-62888 WordPress WP Attachments plugin <= 5.2 - Broken Access Control vulnerability 0.2%
- CVE-2025-64260 WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-23819 WordPress WP Cloud plugin <= 1.4.3 - Arbitrary File Deletion vulnerability 0.6%
- CVE-2024-38789 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-22291 WordPress Browser Theme Color Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2023-47655 WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-47242 WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-47245 WordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-47656 WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-45758 WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS) 0.5%
- CVE-2023-45651 WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-34006 WordPress Telegram Bot & Channel Plugin <= 3.6.2 is vulnerable to Cross Site Scripting (XSS) 0.4%