Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Strategy11 Team — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting Strategy11 Team. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Strategy11 Team develops WordPress plugins for business management solutions, with their core use case involving workflow automation and client management tools. Historically, their vulnerabilities have commonly included stored cross-site scripting (XSS), server-side request forgery (SSRF), and authentication bypass flaws, often stemming from insufficient input validation and improper access controls. The team has addressed multiple critical remote code execution vulnerabilities in their products, with their CVE record reflecting persistent security challenges in user permission handling and data sanitization. While no major public security incidents have been documented, their vulnerability history indicates a pattern of issues related to privilege escalation and insecure direct object references, requiring ongoing security remediation efforts.

CVE ID Title CVSS Severity Published
CVE-2026-28004 WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 7.1 High 2026-08-13
CVE-2026-61959 WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 6.5 Medium 2026-08-06
CVE-2026-59550 WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability — AWP Classifieds CWE-89 9.3 Critical 2026-07-27
CVE-2026-65469 WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability — AWP Classifieds CWE-862 5.3 Medium 2026-07-23
CVE-2026-57339 WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability — Business Directory CWE-862 6.6 Medium 2026-06-29
CVE-2026-57328 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 6.5 Medium 2026-06-29
CVE-2026-57326 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 6.5 Medium 2026-06-29
CVE-2026-42726 WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability — AWP Classifieds CWE-862 6.5 Medium 2026-05-27
CVE-2026-24593 WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability — AWP Classifieds CWE-497 5.3 Medium 2026-01-23
CVE-2025-62131 WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability — Tasty Recipes Lite CWE-862 4.3 Medium 2025-12-31
CVE-2025-62132 WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability — Tasty Recipes Lite CWE-862 4.3 Medium 2025-12-31
CVE-2025-64630 WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability — Business Directory CWE-862 4.9 Medium 2025-12-16
CVE-2025-67596 WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability — Business Directory CWE-352 4.3 Medium 2025-12-09
CVE-2025-64219 WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability — Business Directory CWE-862 4.3 Medium 2025-10-29
CVE-2025-57928 WordPress AWP Classifieds plugin <= 4.4.3 - Content Injection vulnerability — AWP Classifieds CWE-80 5.3 Medium 2025-09-22
CVE-2025-31440 WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability — Terms of Use CWE-352 7.1 High 2025-03-28

This page lists every published CVE security advisory associated with Strategy11 Team. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.