Plugin icon

Contact List – Online Staff Directory & Address Book

contact-list

Vulnerabilities:

5

Last Updated:

March 19, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
Contact List < 3.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter
Fixed in
Fixed in 3.0.19
CVSS
5.5 (medium)
Published
2024-05-09
Title
Contact List – Easy Business Directory, Staff Directory and Address Book Plugin < 2.9.88 - Missing Authorization to Notice Dismissal
Fixed in
Fixed in 2.9.88
CVSS
5.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.9.72
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.9.50
CVSS
4.3 (medium)
Published
2021-08-24
Title
Contact List < 2.9.42 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.9.42
CVSS
7.1 (high)