milmor

Products

ProductCVEsExploitedLatest
Amministrazione Trasparente2–Aug 31, 2025
Telegram Bot & Channel1–Nov 25, 2025
WP Attachments1–May 28, 2025
WP SPID Italia1–Jan 11, 2025

Exploited and recent CVEs

  • CVE-2025-13068 High 7.2 Telegram Bot & Channel <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username 0.2%
  • CVE-2025-5083 Medium 5.5 Amministrazione Trasparente <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function 0.3%
  • CVE-2025-5082 Medium 6.1 WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parameter 0.3%
  • CVE-2024-11758 Medium 6.4 WP SPID Italia <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2021-4398 Medium 4.3 Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypass 0.4%