strategy11team

Records41All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

strategy11team records in CISA KEV

No strategy11team vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Formidable Form Builder 9 records HIGH Formidable Forms 8 records HIGH Business Directory Plugin - Easy Listing Directories 6 records LOW Awp Classifieds 5 records HIGH User Registration Forms 1 record LOW

Records

1 record in User Registration Forms · all components

TI-2024-01200 CVE-2024-1290 · GHSA-hgjm-23r8-g35c

Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover

LOW 30

The User Registration WordPress plugin before 2.12 does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them to generate, and leak, valid password reset URLs, which they…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00554 Published 2024-03-11 Fixed in 2.12

Open these records in search →

Critical	6
High	17
Medium	18
Low	0
No CVSS	0