Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Albo Pretorio On line Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 6 vulnerability records associated with Albo Pretorio On line, published between 2023 and 2024.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

6Total records
0Critical
0High
6Medium
0Low
0Informational
5Patched records
1Currently marked unpatched
2023-03-27First disclosure
2024-01-17Latest disclosure
6 of 6CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202344 records
202422 records

Severity Breakdown

SeverityRecordsShare
Medium6100%

Vulnerability-Type Breakdown

Cross-Site Scripting

5 records83.3%

First: 2023. Latest: 2024.

Information Disclosure

1 record16.7%

First: 2024. Latest: 2024.

Patch Status

Patched
5
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 4.7
  • 4.6.4
  • 4.6.2
  • 4.6.1

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-4.6.6Albo Pretorio Online <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingJanuary 17, 20244.7Medium
*-4.6.6Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information DisclosureJanuary 17, 2024Not suppliedMedium
*-4.6.3Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site ScriptingMay 3, 20234.6.4Medium
*-4.6.3Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site ScriptingMay 3, 20234.6.4Medium
*-4.6.1Albo Pretorio Online <= 4.6.1 - Reflected Cross-Site ScriptingApril 3, 20234.6.2Medium
*-4.6Albo Pretorio Online <= 4.6 - Reflected Cross-Site Scripting via 'Errore'March 27, 20234.6.1Medium

Selected source records

Latest Records

MediumCVE-2024-22301

Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure

Published: January 17, 2024

Affected versions
*-4.6.6
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2024-22302

Albo Pretorio Online <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: January 17, 2024

Affected versions
*-4.6.6
Patched versions
4.7
Original Wordfence record
MediumCVE-2023-32108

Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting

Published: May 3, 2023

Affected versions
*-4.6.3
Patched versions
4.6.4
Original Wordfence record
MediumCVE-2023-32109

Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting

Published: May 3, 2023

Affected versions
*-4.6.3
Patched versions
4.6.4
Original Wordfence record
MediumCVE-2023-28993

Albo Pretorio Online <= 4.6.1 - Reflected Cross-Site Scripting

Published: April 3, 2023

Affected versions
*-4.6.1
Patched versions
4.6.2
Original Wordfence record
MediumCVE-2023-28750

Albo Pretorio Online <= 4.6 - Reflected Cross-Site Scripting via 'Errore'

Published: March 27, 2023

Affected versions
*-4.6
Patched versions
4.6.1
Original Wordfence record

Highest-Severity Records

MediumCVE-2024-22302

Albo Pretorio Online <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: January 17, 2024

Affected versions
*-4.6.6
Patched versions
4.7
Original Wordfence record
MediumCVE-2023-28993

Albo Pretorio Online <= 4.6.1 - Reflected Cross-Site Scripting

Published: April 3, 2023

Affected versions
*-4.6.1
Patched versions
4.6.2
Original Wordfence record
MediumCVE-2023-28750

Albo Pretorio Online <= 4.6 - Reflected Cross-Site Scripting via 'Errore'

Published: March 27, 2023

Affected versions
*-4.6
Patched versions
4.6.1
Original Wordfence record
MediumCVE-2023-32108

Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting

Published: May 3, 2023

Affected versions
*-4.6.3
Patched versions
4.6.4
Original Wordfence record
MediumCVE-2023-32109

Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting

Published: May 3, 2023

Affected versions
*-4.6.3
Patched versions
4.6.4
Original Wordfence record
MediumCVE-2024-22301

Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure

Published: January 17, 2024

Affected versions
*-4.6.6
Patched versions
Not supplied
Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2024-22301

Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure

Published: January 17, 2024

Affected versions
*-4.6.6
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory