Marco Milesi vulnerabilities
Published CVEs affecting Marco Milesi products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-64252
Medium · 4.9
CWE-918 Jan 22, 2026
WordPress ANAC XML Viewer plugin <= 1.8.2 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through <= 1.8.2.
CVE-2025-62888
Medium · 5.4
CWE-862 Dec 31, 2025
WordPress WP Attachments plugin <= 5.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attachments: from n/a through <= 5.2.
CVE-2025-64260
High · 7.1
CWE-79 Dec 18, 2025
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected XSS.This issue affects ANAC XML Bandi di Gara: from n/a through <= 7.7.