CveMateVulnerability intelligence

Strategy11 Team vulnerabilities

19 vulnerabilities

Known vulnerabilities in Strategy11 Team products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.

Products

4

Business Directory11 vulnerabilities
AWP Classifieds5 vulnerabilities
Tasty Recipes Lite2 vulnerabilities
Terms Of Use1 vulnerabilities

CVE-2025-62131strategy11 teamtasty recipes lite+19mo ago31-12-2025 16:04

Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through <= 1.1.5.CVE-2025-62132strategy11 teamtasty recipes lite+19mo ago31-12-2025 16:03

Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tasty Recipes Lite: from n/a through <= 1.1.5.CVE-2025-31440strategy11 teamterms of use+11y ago28-03-2025 11:54

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Terms of Use terms-of-use-2 allows Stored XSS.This issue affects Terms of Use: from n/a through <= 2.0.CVE-2025-57928strategy11 teamawp classifieds+11y ago22-09-2025 18:25

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Code Injection.This issue affects AWP Classifieds: from n/a through <= 4.4.3.CVE-2025-67596strategy11 teambusiness directory+110mo ago09-12-2025 14:14

Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19.CVE-2025-64630strategy11 teambusiness directory+110mo ago16-12-2025 08:12

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19.CVE-2025-64219strategy11 teambusiness directory+111mo ago29-10-2025 08:38

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.18.CVE-2026-61959strategy11 teambusiness directory+12mo ago06-08-2026 14:27

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.CVE-2026-84758strategy11 teambusiness directory+11mo ago03-09-2026 16:31

Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.CVE-2026-84769strategy11 teambusiness directory+11mo ago03-09-2026 16:31

Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.CVE-2026-59550strategy11 teamawp classifieds+12mo ago27-07-2026 13:59

Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.CVE-2026-65469strategy11 teamawp classifieds+13mo ago23-07-2026 11:18

Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.CVE-2026-42726strategy11 teamawp classifieds+14mo ago27-05-2026 09:49

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through <= 4.4.5.CVE-2026-57339strategy11 teambusiness directory+13mo ago29-06-2026 13:36

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.CVE-2026-57328strategy11 teambusiness directory+13mo ago29-06-2026 13:36

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.CVE-2026-57326strategy11 teambusiness directory+13mo ago29-06-2026 13:36

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.CVE-2026-94173strategy11 teambusiness directory+121d ago30-09-2026 12:27

Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.CVE-2026-24593strategy11 teamawp classifieds+19mo ago23-01-2026 14:29

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects AWP Classifieds: from n/a through <= 4.4.3.CVE-2026-28004strategy11 teambusiness directory+12mo ago13-08-2026 13:36

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.