Strategy11 Team

4 results · Clear filters · Feed

• Critical 9.3
  CVE-2026-59550 Public exploit

  WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability

  Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.

  Strategy11 Team AWP Classifieds
  Jul 27, 2026
• High 7.5
  CVE-2026-2576 Public exploit

  Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter

  The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user supplied par…

  Strategy11 Team Business Directory Plugin – Easy Listing Directories for WordPress Web / CMS
  Feb 18, 2026
• High 8.3
  CVE-2017-20192 Public exploit Scanner template

  Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

  The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after_html' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This m…

  Strategy11 Team Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder Web / CMS
  Oct 16, 2024
• Critical 9.8
  CVE-2024-4443 Public exploit Scanner template EPSS 10%

  Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter

  The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ parameter in all versions up to, and including, 6.4.2 due to insufficient escaping on the user suppli…

  Strategy11 Team Business Directory Plugin – Easy Listing Directories for WordPress Web / CMS
  May 22, 2024