strategy11team

Records41All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

strategy11team records in CISA KEV

No strategy11team vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Formidable Form Builder 9 records HIGH Formidable Forms 8 records HIGH Business Directory Plugin - Easy Listing Directories 6 records LOW Awp Classifieds 5 records HIGH User Registration Forms 1 record LOW

Records

5 records in Awp Classifieds · all components

TI-2022-03006 CVE-2022-3254 · GHSA-xm5j-qjxj-574h

AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi

HIGH 82

The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a spe…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06592 Published 2022-10-31 Fixed in 4.3 CWE-89

TI-2014-08175 CVE-2014-10013 · GHSA-2gwg-wwvx-fx7x

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for…

MEDIUM 40

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase parameter in a dosearch action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04594 Published 2015-01-13 No fix listed CWE-89

TI-2024-20722 CVE-2024-31350 · GHSA-x422-8wmj-q94w

WordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in AWP Classifieds Team AWP Classifieds.This issue affects AWP Classifieds: from n/a through 4.3.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-06-09 No fix listed CWE-862

TI-2023-22200 CVE-2023-41801 · GHSA-49x4-gm58-wgqp

WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin <= 4.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-10-06 No fix listed CWE-352

TI-2014-08174 CVE-2014-10012 · GHSA-fgc7-w7hq-gjcf

Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin…

LOW 23

Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01633 Published 2015-01-13 No fix listed CWE-79

Open these records in search →

Critical	6
High	17
Medium	18
Low	0
No CVSS	0