Skip to content
Noroxi

Strategy11 records

29 published records for vendor strategy11.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
34.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

29 records
  • CVE-2023-2877
    42Plan

    Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

    HighCVSS 8.8Proof of conceptEPSS 22%

    strategy11 · formidable formsJun 27, 2023

  • CVE-2022-3254
    41Plan

    AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 5%

    strategy11 · awp classifiedsOct 31, 2022

  • CVE-2019-15780
    40Plan

    The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.

    CriticalCVSS 9.8No exploitEPSS 2%

    strategy11 · formidable form builderAug 29, 2019

  • CVE-2021-24884
    39Monitor

    Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting

    CriticalCVSS 9.6Proof of conceptEPSS 3%

    strategy11 · formidable form builderOct 25, 2021

  • CVE-2022-45806
    39Monitor

    WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    strategy11 · formidable formsDec 13, 2024

  • CVE-2021-24178
    35Monitor

    Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS

    HighCVSS 8.8No exploitEPSS 0%

    strategy11 · business directory plugin - easy listing directoriesMay 6, 2021

  • CVE-2021-24179
    35Monitor

    Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE

    HighCVSS 8.8No exploitEPSS 0%

    strategy11 · business directory plugin - easy listing directoriesMay 6, 2021

  • CVE-2024-31350
    35Monitor

    WordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    strategy11 · awp classifiedsJun 9, 2024

  • CVE-2023-24419
    35Monitor

    WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    strategy11 · formidable form builderFeb 28, 2023

  • CVE-2023-41801
    35Monitor

    WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    strategy11 · awp classifiedsOct 6, 2023

  • CVE-2014-10013
    31Monitor

    SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQ

    HighCVSS 7.5Proof of conceptEPSS 4%

    strategy11 · awp classifiedsJan 13, 2015

  • CVE-2023-1405
    30Monitor

    Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

    HighCVSS 7.5Proof of conceptEPSS 0%

    strategy11 · formidable formsJan 16, 2024

  • CVE-2021-24248
    28Monitor

    Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE

    HighCVSS 7.2No exploitEPSS 1%

    strategy11 · business directory plugin - easy listing directoriesMay 6, 2021

  • CVE-2021-24249
    26Monitor

    Business Directory Plugin < 5.11.2 - Arbitrary Listing Export

    MediumCVSS 6.5No exploitEPSS 0%

    strategy11 · business directory plugin - easy listing directoriesMay 6, 2021

  • CVE-2024-1290
    26Monitor

    Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover

    MediumCVSS 6.5No exploitEPSS 0%

    strategy11 · user registration formsMar 11, 2024

  • CVE-2023-0816
    26Monitor

    Formidable Forms < 6.1 - IP Spoofing

    MediumCVSS 6.5No exploitEPSS 0%

    strategy11 · formidable form builderMar 27, 2023

  • CVE-2017-20192
    24Monitor

    Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    strategy11 · formidable form builderOct 16, 2024

  • CVE-2024-11188
    24Monitor

    Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTM

    MediumCVSS 6.1No exploitEPSS 0%

    strategy11 · formidable formsNov 23, 2024

  • CVE-2023-6830
    24Monitor

    Formidable Forms <= 6.7 - HTML Injection

    MediumCVSS 6.1No exploitEPSS 0%

    strategy11 · formidable form builderJan 9, 2024

  • CVE-2024-23522
    24Monitor

    WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    strategy11 · formidable formsMay 17, 2024

  • CVE-2017-20194
    21Monitor

    Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

    MediumCVSS 5.3Proof of conceptEPSS 1%

    strategy11 · formidable form builderOct 16, 2024

  • CVE-2021-24250
    21Monitor

    Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    strategy11 · business directory plugin - easy listing directoriesMay 6, 2021

  • CVE-2024-6725
    21Monitor

    Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    strategy11 · formidable formsJul 31, 2024

  • CVE-2021-24608
    19Monitor

    Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    strategy11 · formidable form builderOct 25, 2021

  • CVE-2024-9768
    19Monitor

    Formidable Forms < 6.14.1 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    strategy11 · formidable formsNov 21, 2024