Skip to content

Strategy11 vulnerabilities

Products

Newest

strategy11 formidable charts Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameter CVE-2026-15990 7.5 HighAugust 26, 2026
strategy11 formidable digital signatures Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field CVE-2026-16230 9.8 CriticalAugust 11, 2026
strategy11 formidable forms WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability CVE-2022-45806 4.3 MediumDecember 13, 2024
strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter CVE-2024-11188 6.1 MediumNovember 23, 2024
strategy11 formidable forms Formidable Forms < 6.14.1 - Admin+ Stored XSS CVE-2024-9768 4.8 MediumNovember 21, 2024
strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure CVE-2017-20194 5.3 MediumOctober 16, 2024
strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting CVE-2017-20192 Public exploit 8.3 HighOctober 16, 2024
strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-6725 4.9 MediumJuly 31, 2024
awp classifieds team classifieds, strategy11 awp classifieds +1 more WordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability CVE-2024-31350 4.3 MediumJune 9, 2024
strategy11 formidable forms WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability CVE-2024-23522 5.3 MediumMay 17, 2024
unknown user registration, strategy11 user registration forms +1 more Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover CVE-2024-1290 6.5 MediumMarch 11, 2024
strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-0660 6.1 MediumFebruary 5, 2024
strategy11 formidable forms Formidable Forms < 6.2 - Unauthenticated PHP Object Injection CVE-2023-1405 Public exploit 7.5 HighJanuary 16, 2024
strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-6842 4.4 MediumJanuary 9, 2024
strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.7 - HTML Injection CVE-2023-6830 6.5 MediumJanuary 9, 2024
awp classifieds team ad directory & listings by awp classifieds, strategy11 awp classifieds +1 more WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-41801 5.4 MediumOctober 6, 2023
strategy11 formidable forms Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution CVE-2023-2877 Public exploit EPSS 22.5% 8.8 HighJune 27, 2023
unknown formidable forms, strategy11 formidable form builder +1 more Formidable Forms < 6.1 - IP Spoofing CVE-2023-0816 6.5 MediumMarch 27, 2023
strategy11 form builder team formidable forms, strategy11 formidable form builder +1 more WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-24419 7.1 HighFebruary 28, 2023
strategy11 awp classifieds, unknown wordpress classifieds plugin – ad directory & listings by awp classifieds +1 more AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi CVE-2022-3254 9.8 CriticalOctober 31, 2022
strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 more Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting CVE-2021-24884 Public exploit 9.6 CriticalOctober 25, 2021
strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 more Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting CVE-2021-24608 4.8 MediumOctober 25, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update CVE-2021-24251 4.3 MediumMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting CVE-2021-24250 5.4 MediumMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.2 - Arbitrary Listing Export CVE-2021-24249 6.5 MediumMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE CVE-2021-24248 7.2 HighMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE CVE-2021-24179 8.8 HighMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS CVE-2021-24178 8.8 HighMay 5, 2021
strategy11 formidable form builder The formidable plugin before 4.02.01 for WordPress has unsafe deserialization. CVE-2019-15780 9.8 CriticalAugust 29, 2019
strategy11 awp classifieds SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress... CVE-2014-10013 Public exploit 7.5 HighJanuary 13, 2015
strategy11 awp classifieds Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for... CVE-2014-10012 4.3 MediumJanuary 13, 2015