Skip to content

Strategy11team vulnerabilities

Products

Newest

sswells formidable forms – contact form, survey, quiz, payment, calculator form & custom form builder Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameter CVE-2026-89435 8.8 HighOctober 30, 2026
strategy11team awp classifieds AWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad Page CVE-2026-96904 5.3 MediumOctober 14, 2026
strategy11team awp classifieds AWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import CVE-2025-15700 8.8 HighOctober 9, 2026
strategy11team formidable forms – wordpress form builder for contact forms, calculators, quizzes & more Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter CVE-2026-18331 7.2 HighAugust 26, 2026
strategy11 team awp classifieds WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability CVE-2026-59550 Public exploit 9.3 CriticalJuly 27, 2026
strategy11 team awp classifieds WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability CVE-2026-65469 5.3 MediumJuly 23, 2026
strategy11team awp classifieds WordPress AWP Classifieds plugin <= 4.4.4 - Broken Access Control vulnerability CVE-2026-39533 7.5 HighJune 15, 2026
strategy11 team awp classifieds WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability CVE-2026-42726 6.5 MediumMay 27, 2026
strategy11team awp classifieds AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions' CVE-2026-5100 7.5 HighMay 5, 2026
strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter CVE-2026-2888 5.3 MediumMarch 13, 2026
strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse CVE-2026-2890 7.5 HighMarch 13, 2026
strategy11team business directory plugin – easy listing directories for wordpress Business Directory Plugin <= 6.4.20 - Missing Authorization to Unauthenticated Arbitrary Listing Modification CVE-2026-1656 5.3 MediumFebruary 18, 2026
strategy11team business directory plugin – easy listing directories for wordpress Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter CVE-2026-2576 Public exploit 7.5 HighFebruary 18, 2026
strategy11 team awp classifieds WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability CVE-2026-24593 5.3 MediumJanuary 23, 2026
strategy11 team awp classifieds WordPress AWP Classifieds plugin <= 4.4.3 - Content Injection vulnerability CVE-2025-57928 5.3 MediumSeptember 22, 2025
strategy11team business directory plugin – easy listing directories for wordpress Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition CVE-2024-13887 5.3 MediumMarch 13, 2025
strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter CVE-2024-11188 6.1 MediumNovember 23, 2024
strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure CVE-2017-20194 5.3 MediumOctober 16, 2024
strategy11 formidable form builder, formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +2 more Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting CVE-2017-20192 Public exploit 8.3 HighOctober 16, 2024
strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-6725 4.9 MediumJuly 31, 2024
businessdirectoryplugin business directory, strategy11team business directory plugin, business directory plugin – easy listing directories for wordpress +2 more Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection CVE-2023-5527 7.4 HighJune 18, 2024
awp classifieds team classifieds, strategy11 awp classifieds +1 more WordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability CVE-2024-31350 4.3 MediumJune 9, 2024
businessdirectoryplugin business directory, strategy11team business directory plugin – easy listing directories for wordpress +1 more Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter CVE-2024-4443 Public exploit EPSS 10.4% 9.8 CriticalMay 22, 2024
awp classifieds team classifieds, strategy11team awp classifieds +1 more WordPress AWP Classifieds plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32447 4.3 MediumApril 15, 2024
strategy11 formidable forms, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-0660 6.1 MediumFebruary 5, 2024
strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-6842 4.4 MediumJanuary 9, 2024
strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 more Formidable Forms <= 6.7 - HTML Injection CVE-2023-6830 6.5 MediumJanuary 9, 2024
business directory team directory plugin – easy listing directories for wordpress, businessdirectoryplugin business directory, strategy11team business directory plugin – easy listing directories for wordpress +2 more WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-5803 4.3 MediumNovember 30, 2023
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update CVE-2021-24251 4.3 MediumMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting CVE-2021-24250 5.4 MediumMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.2 - Arbitrary Listing Export CVE-2021-24249 6.5 MediumMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE CVE-2021-24248 7.2 HighMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE CVE-2021-24179 8.8 HighMay 5, 2021
business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 more Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS CVE-2021-24178 8.8 HighMay 5, 2021