Skip to content
OpenAdvisories

Vendor

Anssi Laitila

7 known vulnerabilities.

Anssi Laitila at a glance

Last 12 months
2
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202610
Feb 202610
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202510
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202510
Dec 202400

Products

Shared Files 3 Shared Files – Frontend File Upload Form & Secure File Sharing 2 Contact List 1 Contact List – Online Staff Directory & Address Book 1
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 6.4
    CVE-2026-3516 Public exploit

    Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter

    The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18. This is due to insufficient input sanitization and output escaping when handling the Google Map…

    Anssi Laitila Contact List – Online Staff Directory & Address Book Web / CMS
  • Medium 5.3
    CVE-2024-34438

    WordPress Shared Files plugin <= 1.7.19 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19.

    Anssi Laitila Shared Files
  • High 7.2
    CVE-2025-4392

    Shared Files <= 1.7.48 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function

    The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via html File uploads in all versions up to, and including, 1.7.48 due to insufficient input sanitization and output escaping …

    Anssi Laitila Shared Files – Frontend File Upload Form & Secure File Sharing Web / CMS
  • High 7.2
    CVE-2024-13504

    Shared Files – Frontend File Upload Form & Secure File Sharing <= 1.7.42 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload

    The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient input sanitization and output escaping.…

    Anssi Laitila Shared Files – Frontend File Upload Form & Secure File Sharing Web / CMS
  • Medium 5.3
    CVE-2024-43230

    WordPress Shared Files – Premium Download Manager & Secure File Sharing with Frontend File Upload plugin <= 1.7.28 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.28.

    Anssi Laitila Shared Files
  • Medium 5.3
    CVE-2024-34821

    WordPress Contact List plugin <= 2.9.87 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87.

    Anssi Laitila Contact List
  • Medium 5.3
    CVE-2024-32679

    WordPress Shared Files plugin <= 1.7.16 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.16.

    Anssi Laitila Shared Files