WP SPID Italia

WP SPID Italia has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for WP SPID Italia has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by SOPROBRO. WP SPID Italia is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP SPID Italia vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-11758

WP SPID Italia <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-01-10 19:04	WP SPID Italia <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting WP SPID Italia <= 2.9	`CVE-2024-11758`	6.4 Medium	SOPROBRO	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks WP SPID Italia < 2.3.5	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–2 of 2 reports

Latestv2.14

WP SPID Italia

Author

Marco Milesi

4.2(5)

84/100

Last Updated

2026-06-03 (3mo ago)

Active Installs

100+

Downloads

16,678

Requires WP

4.8+

Requires PHP

Tested up to

WP 7.0.4

Created

2017-11-14 (9y ago)

Plugin WordPress per l’interfacciamento con il Sistema Pubblico di Identità Digitale (SPID) GitHub: https://github.com/WPGov/wp-spid-italia WP.org: https://wordpress.org/plugins/wp-spid-italia Copyright © 2017-2026 Marco Milesi www.marcomilesi.com – www.wpgov.it Ringraziamenti Christian Ghellere, Andrea Smith: attività di software testing Paolo Bozzo: sviluppo libreria Drupal-PASW Nadia Caprotti: condivisione know-how Drupal-PASW Comune di Firenze: sviluppo libreria SimpleSaml riadattata da Paolo Porte Aperte sul Web Sponsor Italian Linux Society

View on WordPress.org