Strategy11 Team vulnerabilities and threats

19 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.2%	CVE-2026-94173Business Directory (WordPress plugin) · Insecure Direct Object Reference Medium5.4EPSS 0.2%2026-09-30CVE Database V5CVE-2026-94173 Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions. EPSS 0.2%Vulnerability Strategy11 Team CWE-639	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.3%	CVE-2026-84769Business Directory (WordPress plugin) · Insecure Direct Object Reference Medium6.5EPSS 0.3%2026-09-03CVE Database V5CVE-2026-84769 Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions. EPSS 0.3%Vulnerability Strategy11 Team CWE-639	CVE Database V5	2026-09-03
Medium	6.5	EPSS 0.3%	CVE-2026-84758Business Directory (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-09-03CVE Database V5CVE-2026-84758 Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions. EPSS 0.3%Vulnerability Strategy11 Team CWE-862	CVE Database V5	2026-09-03
High	7.1	EPSS 0.3%	CVE-2026-28004Business Directory (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-13CVE Database V5CVE-2026-28004 Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions. EPSS 0.3%Vulnerability Strategy11 Team CWE-79	CVE Database V5	2026-08-13
Medium	6.5	EPSS 0.2%	CVE-2026-61959Business Directory (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-08-06CVE Database V5CVE-2026-61959 CVE-2026-61959 is a medium severity Cross-Site Scripting (XSS) vulnerability affecting Strategy11 Team's Business Directory plugin versions up to and including 6.4.24. The vulnerability involves improper neutralization of input during web page generation, allowing a subscriber-level user to potentially execute malicious scripts. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time. EPSS 0.2%Vulnerability Strategy11 Team CWE-79 #ghsa-cv33-h348-47m4	CVE Database V5	2026-08-06
Critical	9.3	EPSS 0.4%	CVE-2026-59550AWP Classifieds (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-07-27CVE Database V5CVE-2026-59550 Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. EPSS 0.4%Vulnerability Strategy11 Team CWE-89	CVE Database V5	2026-07-27
Medium	5.3	EPSS 0.3%	CVE-2026-65469AWP Classifieds (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65469 Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions. EPSS 0.3%Vulnerability Strategy11 Team CWE-862	CVE Database V5	2026-07-23
Medium	6.6	EPSS 0.3%	CVE-2026-57339Business Directory (WordPress plugin) · Missing Authorization Medium6.6EPSS 0.3%2026-06-29CVE Database V5CVE-2026-57339 Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions. EPSS 0.3%Vulnerability Strategy11 Team CWE-862	CVE Database V5	2026-06-29
Medium	6.5	EPSS 0.2%	CVE-2026-57328Business Directory (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-06-29CVE Database V5CVE-2026-57328 Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. EPSS 0.2%Vulnerability Strategy11 Team CWE-79	CVE Database V5	2026-06-29
Medium	6.5	EPSS 0.3%	CVE-2026-57326Business Directory (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2026-06-29CVE Database V5CVE-2026-57326 Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. EPSS 0.3%Vulnerability Strategy11 Team CWE-79	CVE Database V5	2026-06-29
Medium	6.5	EPSS 0.2%	CVE-2026-42726AWP Classifieds (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.2%2026-05-27CVE Database V5CVE-2026-42726 Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through <= 4.4.5. EPSS 0.2%Vulnerability Strategy11 Team	CVE Database V5	2026-05-27
Medium	5.3	EPSS 0.3%	CVE-2026-24593AWP Classifieds (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2026-01-23CVE Database V5CVE-2026-24593 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects AWP Classifieds: from n/a through <= 4.4.3. EPSS 0.3%Vulnerability Strategy11 Team	CVE Database V5	2026-01-23
Medium	4.3	EPSS 0.2%	CVE-2025-62131Tasty Recipes Lite (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-12-31CVE Database V5CVE-2025-62131 Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through <= 1.1.5. EPSS 0.2%Vulnerability Strategy11 Team	CVE Database V5	2025-12-31
Medium	4.3	EPSS 0.2%	CVE-2025-62132Tasty Recipes Lite (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-12-31CVE Database V5CVE-2025-62132 Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through <= 1.1.5. EPSS 0.2%Vulnerability Strategy11 Team	CVE Database V5	2025-12-31
Medium	4.9	EPSS 0.3%	CVE-2025-64630Business Directory (WordPress plugin) · Missing Authorization Medium4.9EPSS 0.3%2025-12-16CVE Database V5CVE-2025-64630 Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19. EPSS 0.3%Vulnerability Strategy11 Team	CVE Database V5	2025-12-16
Medium	4.3	EPSS 0.1%	CVE-2025-67596Business Directory (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-09CVE Database V5CVE-2025-67596 Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19. EPSS 0.1%Vulnerability Strategy11 Team	CVE Database V5	2025-12-09
Medium	4.3	EPSS 0.2%	CVE-2025-64219Business Directory (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-10-29CVE Database V5CVE-2025-64219 Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.18. EPSS 0.2%Vulnerability Strategy11 Team	CVE Database V5	2025-10-29
Medium	5.3	EPSS 0.3%	CVE-2025-57928AWP Classifieds (WordPress plugin) · Basic XSS Medium5.3EPSS 0.3%2025-09-22CVE Database V5CVE-2025-57928 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Code Injection.This issue affects AWP Classifieds: from n/a through <= 4.4.3. EPSS 0.3%Vulnerability Strategy11 Team	CVE Database V5	2025-09-22
High	7.1	EPSS 0.1%	CVE-2025-31440Terms of Use (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-03-28CVE Database V5CVE-2025-31440 Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Terms of Use terms-of-use-2 allows Stored XSS.This issue affects Terms of Use: from n/a through <= 2.0. EPSS 0.1%Vulnerability Strategy11 Team	CVE Database V5	2025-03-28

Page 1 of 1