Anac Xml Viewer Vulnerabilities

The ANAC XML Viewer plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application which can be us...

CVSS:

6.4

Affected:

up to 1.8.2

Fixed in:

1.8.3

Disclosed:

Nov 26, 2025

CVE-2025-64252 on NVD →

The ANAC XML Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arb...

CVSS:

4.4

Affected:

up to 1.7

Fixed in:

1.7.1

Disclosed:

Nov 7, 2023

CVE-2023-47245 on NVD →