Read the docs

strategy11team

Records41All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

strategy11team records in CISA KEV

No strategy11team vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Business Directory Plugin - Easy Listing Directories · all components

Priority LOW 39

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00672 Published 2021-05-05 Fixed in 5.11 CWE-352
Priority LOW 39

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or d…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00672 Published 2021-05-05 Fixed in 5.11.1 CWE-352
Priority LOW 35

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrat…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01583 Published 2021-05-05 Fixed in 5.11.1 CWE-434
Priority LOW 30

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files,…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00708 Published 2021-05-05 Fixed in 5.11.2 CWE-352
Priority LOW 25

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripti…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00645 Published 2021-05-05 Fixed in 5.11.2 CWE-79
Priority LOW 21

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitr…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00474 Published 2021-05-05 Fixed in 5.11.2 CWE-352
Open these records in search →