PatchTheCVE: marcomilesihttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-22291: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browserhttps://patchthecve.com/cve/CVE-2024-22291.htmlhttps://patchthecve.com/cve/CVE-2024-22291.htmlWed, 17 Jun 2026 07:11:07 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Color: from n/a through 1.3.CVE-2023-47245: Authhttps://patchthecve.com/cve/CVE-2023-47245.htmlhttps://patchthecve.com/cve/CVE-2023-47245.htmlWed, 17 Jun 2026 06:32:27 +0000MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions.CVE-2023-47242: Authhttps://patchthecve.com/cve/CVE-2023-47242.htmlhttps://patchthecve.com/cve/CVE-2023-47242.htmlWed, 17 Jun 2026 06:32:26 +0000MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.CVE-2023-47656: Authhttps://patchthecve.com/cve/CVE-2023-47656.htmlhttps://patchthecve.com/cve/CVE-2023-47656.htmlWed, 17 Jun 2026 06:33:03 +0000MEDIUM 5.9: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.CVE-2023-45651: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgehttps://patchthecve.com/cve/CVE-2023-45651.htmlhttps://patchthecve.com/cve/CVE-2023-45651.htmlWed, 17 Jun 2026 06:29:00 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: from n/a through 5.0.11.