Albo Pretorio On line
Albo Pretorio On line has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (83%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.
5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.
5 independent researchers contributed these findings, most of them (2) reported by Phd. Albo Pretorio On line is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-22301Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure
Read the full analysisVulnerability Records

Albo Pretorio On line
Author
Scimone Ignazio
Albo Pretorio On line lets an Italian public body publish official acts on its online notice board (“albo pretorio”), as required by art. 32 of Law no. 69 of 18 June 2009, which since 1 January 2011 requires acts to be published on the institutional website in order to have legal effect. It is a fork, maintained by Considera, of the Albo Pretorio On line plugin by Ignazio Scimone, which stopped at version 4.8 and was removed from wordpress.org on 7 March 2024. The original author no longer updates it; this fork starts from the last published version, continues its maintenance and has fixed its security vulnerabilities. Main features Manage acts (create, publish, expiry, right-to-be-forgotten) from the backend. Categories, bodies, organizational units and responsible people. Front-end publishing via shortcodes. Backend search filters for acts (subject, reference, full or partial number, category). Icons for the common file types attached to acts. Register and exports (CSV / XML / JSON). Shortcodes [Albo] — table of acts on the front-end (parameters: stato, per_page, cat, filtri, minfiltri). [AlboGruppiAtti] — acts grouped by metadata (titolo, meta, valore). [AlboAtto] — details of a single act (titolo, numero, anno). Security The fork underwent a systematic security review (releases 4.9.x and 4.10.1), with code audit and proof-of-concept on a real installation. Vulnerabilities, some of them critical, have been fixed. To report a security issue please use the private channel described in SECURITY.md: do not open a public report. Project Open source fork (GPL) maintained by Considera, with a public repository open to contributions. Code, full changelog and reporting channel: https://github.com/Considerasrl/albo-pretorio-considera
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C