Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

strategy11team vulnerabilities

17 published CVEs name strategy11team among the affected products.

Published CVEs
17
Last 12 months
7
Critical
1
Known exploited
0

Critical 1High 7Medium 9Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20249
  2. 20251
  3. 20267

Newest CVEs

  • CVE-2026-89435

    Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameter

    strategy11team · Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

    High8.8
  • CVE-2026-18331

    Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter

    strategy11team · Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

    High7.2
  • CVE-2026-5100

    AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions'

    strategy11team · AWP Classifieds

    High7.5
  • CVE-2026-2888

    Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter

    strategy11team · Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

    Medium5.3
  • CVE-2026-2890

    Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse

    strategy11team · Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

    High7.5
  • CVE-2026-1656

    Business Directory Plugin <= 6.4.20 - Missing Authorization to Unauthenticated Arbitrary Listing Modification

    strategy11team · Business Directory Plugin – Easy Listing Directories for WordPress

    Medium5.3
  • CVE-2026-2576

    Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter

    strategy11team · Business Directory Plugin – Easy Listing Directories for WordPress

    High7.5
  • CVE-2024-13887

    Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition

    strategy11team · Business Directory Plugin – Easy Listing Directories for WordPress

    Medium5.3
  • CVE-2024-11188

    Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter

    strategy11team · Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

    Medium6.1
  • CVE-2017-20194

    Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

    strategy11team · Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

    Medium5.3