Strategy11 Team

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Strategy11 Team records in CISA KEV

No Strategy11 Team vulnerabilities are listed in CISA KEV.

Records

19 records

TI-2026-42513 CVE-2026-59550 · GHSA-7357-fr34-38wf

WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-07-27 No fix listed CWE-89

TI-2026-58259 CVE-2026-84758 · GHSA-427j-7j55-4h7g

WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability

LOW 35

Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2026-09-03 No fix listed CWE-862

TI-2026-58270 CVE-2026-84769 · GHSA-9w4w-3jc8-f8mr

WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability

LOW 34

Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00266 Published 2026-09-03 No fix listed CWE-639

TI-2026-30949 CVE-2026-42726 · GHSA-83j6-9m62-75cr

WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00242 Published 2026-05-27 No fix listed CWE-862

TI-2026-22345 CVE-2026-28004 · GHSA-w578-wmpc-67cr

WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-13 No fix listed CWE-79

TI-2026-46639 CVE-2026-65469 · GHSA-mf55-cgjw-rpg2

WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability

LOW 30

Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-07-23 No fix listed CWE-862

TI-2026-19833 CVE-2026-24593 · GHSA-c82p-3fr5-pxcv

WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability

LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00338 Published 2026-01-23 No fix listed CWE-497

TI-2025-35781 CVE-2025-57928 · GHSA-hxhg-xc8r-4fjw

WordPress AWP Classifieds plugin <= 4.4.3 - Content Injection vulnerability

LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Code Injection.This issue affects AWP Classifieds…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00316 Published 2025-09-22 No fix listed CWE-80

TI-2025-22621 CVE-2025-31440 · GHSA-77v8-cxj6-2cjq

WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Terms of Use terms-of-use-2 allows Stored XSS.This issue affects Terms of Use: from n/a through <= 2.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00134 Published 2025-03-28 No fix listed CWE-352

TI-2026-41276 CVE-2026-57339 · GHSA-m542-2fpm-5vj8

WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability

LOW 29

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

CVSS 3.1MEDIUM 6.6 Network No auth No interaction EPSS 0.00332 Published 2026-06-29 No fix listed CWE-862

TI-2026-44331 CVE-2026-61959 · GHSA-cv33-h348-47m4

WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-06 No fix listed CWE-79

TI-2026-41265 CVE-2026-57328 · GHSA-mfg7-q8ff-25x2

WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-06-29 No fix listed CWE-79

TI-2026-41263 CVE-2026-57326 · GHSA-j7vw-hgqm-mjq6

WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

LOW 28

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00253 Published 2026-06-29 No fix listed CWE-79

TI-2026-63359 CVE-2026-94173 · GHSA-cq3j-wj6g-q93r

WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability

LOW 24

Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00203 Published 2026-09-30 No fix listed CWE-639

TI-2025-39998 CVE-2025-64630 · GHSA-297g-gfvh-fg6g

WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability

LOW 22

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00341 Published 2025-12-16 No fix listed CWE-862

TI-2025-38454 CVE-2025-62132 · GHSA-98hg-6c5q-j7jq

WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00231 Published 2025-12-31 No fix listed CWE-862

TI-2025-41350 CVE-2025-67596 · GHSA-c3p5-fcjv-492q

WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00119 Published 2025-12-09 No fix listed CWE-352

TI-2025-39662 CVE-2025-64219 · GHSA-gvvw-5fwr-fmr3

WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability

LOW 19

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00194 Published 2025-10-29 No fix listed CWE-862

TI-2025-38453 CVE-2025-62131 · GHSA-rc79-85vx-66wv

WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability

LOW 19

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2025-12-31 No fix listed CWE-862

Open these records in search →