Amministrazione Trasparente <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function
medium
The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, t...
- CVSS:
- 5.5
- Affected:
- up to 9.0
- Fixed in:
- 9.1
- Disclosed:
- Aug 30, 2025
CVE-2025-5083 on NVD →
Amministrazione Trasparente [amministrazione-trasparente] < 8.0.5 (closed)
unknown
[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Amministrazione Trasparente plugin <= 8.0.2 versions.
- Affected:
- up to 8.0.5
- Fixed in:
- 8.0.5
- Disclosed:
- Oct 24, 2023
CVE-2023-45758 on NVD →
Amministrazione Trasparente <= 8.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in versions up to, and including, 8.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbi...
- CVSS:
- 4.4
- Affected:
- up to 8.0.2
- Fixed in:
- 8.0.5
- Disclosed:
- Oct 12, 2023
CVE-2023-45758 on NVD →
Amministrazione Trasparente [amministrazione-trasparente] < 7.1.1 (closed)
unknown
[en] The Amministrazione Trasparente plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.1. This is due to missing or incorrect nonce validation on the at_save_aturl_meta() function. This makes it possible for unauthenticated attackers to update meta data via a forged r...
- Affected:
- up to 7.1.1
- Fixed in:
- 7.1.1
- Disclosed:
- Jul 1, 2023
CVE-2021-4398 on NVD →
Amministrazione Trasparente [amministrazione-trasparente] < 7.1.1 (closed)
unknown
- Affected:
- up to 7.1.1
- Fixed in:
- 7.1.1
- Disclosed:
- Jun 7, 2023
CVE-2021-4342 on NVD →
Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypass
medium
The Amministrazione Trasparente plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.1. This is due to missing or incorrect nonce validation on the at_save_aturl_meta() function. This makes it possible for unauthenticated attackers to update meta data via a forged reques...
- CVSS:
- 4.3
- Affected:
- up to 7.1
- Fixed in:
- 7.1.1
- Disclosed:
- Jul 5, 2021
CVE-2021-4398 on NVD →
Amministrazione Trasparente [amministrazione-trasparente] < 7.1.1 (closed)
unknown
Cross-Site Request Forgery (CSRF) vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Amministrazione Trasparente plugin (versions <= 7.1)
- Affected:
- up to 7.1.1
- Fixed in:
- 7.1.1
- Disclosed:
- Jul 5, 2021
Amministrazione Trasparente [amministrazione-trasparente] < 7.1.1 (closed)
unknown
Multiple plugins are affected by CSRF bypass as they do not properly check for the nonce due to a logic flaw. This could allow attackers to make logged in users do unwanted actions
- Affected:
- up to 7.1.1
- Fixed in:
- 7.1.1
Amministrazione Trasparente [amministrazione-trasparente] < 7.1.1 (closed)
unknown
Over 70 plugins and themes were vulnerable to Cross-Site Request Forgery due to improperly implemented nonce protection that could be bypassed.
- Affected:
- up to 7.1.1
- Fixed in:
- 7.1.1
Amministrazione Trasparente [amministrazione-trasparente] < 9.1 (closed)
unknown
- Affected:
- up to 9.1
- Fixed in:
- 9.1
CVE-2025-5083 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database