Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Strategy11 Team — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting Strategy11 Team. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Strategy11 Team develops WordPress plugins for business management solutions, with their core use case involving workflow automation and client management tools. Historically, their vulnerabilities have commonly included stored cross-site scripting (XSS), server-side request forgery (SSRF), and authentication bypass flaws, often stemming from insufficient input validation and improper access controls. The team has addressed multiple critical remote code execution vulnerabilities in their products, with their CVE record reflecting persistent security challenges in user permission handling and data sanitization. While no major public security incidents have been documented, their vulnerability history indicates a pattern of issues related to privilege escalation and insecure direct object references, requiring ongoing security remediation efforts.

Found 11 results / 19 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-94173 WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability — Business Directory CWE-639 5.4 Medium 2026-09-30
CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability — Business Directory CWE-639 6.5 Medium 2026-09-03
CVE-2026-84758 WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability — Business Directory CWE-862 6.5 Medium 2026-09-03
CVE-2026-28004 WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 7.1 High 2026-08-13
CVE-2026-61959 WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 6.5 Medium 2026-08-06
CVE-2026-57339 WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability — Business Directory CWE-862 6.6 Medium 2026-06-29
CVE-2026-57328 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 6.5 Medium 2026-06-29
CVE-2026-57326 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability — Business Directory CWE-79 6.5 Medium 2026-06-29
CVE-2025-64630 WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability — Business Directory CWE-862 4.9 Medium 2025-12-16
CVE-2025-67596 WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability — Business Directory CWE-352 4.3 Medium 2025-12-09
CVE-2025-64219 WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability — Business Directory CWE-862 4.3 Medium 2025-10-29

This page lists every published CVE security advisory associated with Strategy11 Team. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.