Strategy11 Team Business Directory vulnerabilities
11 vulnerabilities
Known vulnerabilities in Strategy11 Team Business Directory, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-67596strategy11 teambusiness directory+1
EPSS score0.12%
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Cross Site Request Forgery.This issue affects Business Directory: from n/a through <= 6.4.19.CVE-2025-64630strategy11 teambusiness directory+1EPSS score0.34%
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19.CVE-2025-64219strategy11 teambusiness directory+1EPSS score0.19%
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.18.CVE-2026-61959strategy11 teambusiness directory+1EPSS score0.22%
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.CVE-2026-84758strategy11 teambusiness directory+1EPSS score0.33%
Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.CVE-2026-84769strategy11 teambusiness directory+1EPSS score0.27%
Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.CVE-2026-57339strategy11 teambusiness directory+1EPSS score0.33%
Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.CVE-2026-57328strategy11 teambusiness directory+1EPSS score0.22%
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.CVE-2026-57326strategy11 teambusiness directory+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.CVE-2026-94173strategy11 teambusiness directory+1EPSS score0.21%
Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.CVE-2026-28004strategy11 teambusiness directory+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.