Read the docs

Anssi Laitila

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Anssi Laitila records in CISA KEV

No Anssi Laitila vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2024-12545 CVE-2024-13504 · GHSA-qg2j-qw7w-fx96

Cross-site scripting in Anssi Laitila Shared Files – Frontend File Upload Form & Secure…

Priority LOW 38

The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00397 Published 2025-01-31 No fix listed CWE-79
TI-2025-03919 CVE-2025-4392 · GHSA-jqmx-89c6-9c25

Shared Files <= 1.7.48 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function

Priority LOW 32

The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via html File uploads in all versions up to, and including, 1.7.48 due to insufficient…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00377 Published 2025-06-03 No fix listed CWE-79
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Priority LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862
Open these records in search →