Skip to content
OpenAdvisories

Vendor

Anssi Laitila

7 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-3516 Public exploit

    Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter

    The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18. This is due to insufficient input sanitization and output escaping when handling the Google Map…

  • Medium 5.3

    WordPress Shared Files plugin <= 1.7.19 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19.

  • Medium 5.3

    WordPress Shared Files – Premium Download Manager & Secure File Sharing with Frontend File Upload plugin <= 1.7.28 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.28.

  • Medium 5.3

    WordPress Contact List plugin <= 2.9.87 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87.

  • Medium 5.3

    WordPress Shared Files plugin <= 1.7.16 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.16.