Marco Milesi vulnerabilities
We track 4 vulnerabilities in Marco Milesi products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.
Latest Marco Milesi vulnerabilities
- 7.1 High severity
ANAC XML Bandi di Gara: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected XSS.This issue affects ANAC XML Bandi di Gara: from n/a through <= 7.7.
- 7.5 High severity
WP Cloud: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Marco Milesi WP Cloud cloud allows Absolute Path Traversal.This issue affects WP Cloud: from n/a through <= 1.4.3.
- 8.8 High severity
ANAC XML Bandi di Gara: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi ANAC XML Bandi di Gara.This issue affects ANAC XML Bandi di Gara: from n/a through 7.5.
- 8.8 High severity
WP Attachments: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: from n/a through 5.0.11.