ST
Vendor
Strategy11
33
CVEs
0
On KEV
0
New 30D
Products
FF9.8
Formidable Forms
Strategy11
10 CVEs0 on KEV0 new
FF9.8
Formidable Form Builder
Strategy11
9 CVEs0 on KEV0 new
BD8.8
Business Directory Plugin - Easy Listing Directories
Strategy11
6 CVEs0 on KEV0 new
AC9.8
Awp Classifieds
Strategy11
5 CVEs0 on KEV0 new
FC7.5
Formidable Charts
Strategy11
1 CVEs0 on KEV0 new
FD9.8
Formidable Digital Signatures
Strategy11
1 CVEs0 on KEV0 new
UR6.5
User Registration Forms
Strategy11
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-15990 | FC Formidable Charts Strategy11 | 7.5 | Aug 26 | Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameter |
| CVE-2026-16230 | FD Formidable Digital Signatures Strategy11 | 9.8 | Aug 11 | Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field |
| CVE-2022-45806 | FF Formidable Forms Strategy11 | 9.8 | Dec 13 | WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability |
| CVE-2024-11188 | FF Formidable Forms Strategy11 | 6.1 | Nov 23 | Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter |
| CVE-2024-9768 | FF Formidable Forms Strategy11 | 4.8 | Nov 21 | Formidable Forms < 6.14.1 - Admin+ Stored XSS |
| CVE-2017-20194 | FF Formidable Form Builder Strategy11 | 5.3 | Oct 16 | Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure |
| CVE-2017-20192 | FF Formidable Form Builder Strategy11 | 6.1 | Oct 16 | Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2024-6725 | FF Formidable Forms Strategy11 | 5.4 | Jul 31 | Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2024-31350 | AC Awp Classifieds Strategy11 | 8.8 | Jun 9 | WordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability |
| CVE-2024-23522 | FF Formidable Forms Strategy11 | 6.1 | May 17 | WordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerability |
| CVE-2024-1290 | UR User Registration Forms Strategy11 | 6.5 | Mar 11 | Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover |
| CVE-2024-0660 | FF Formidable Forms Strategy11 | 4.3 | Feb 5 | The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions… |
| CVE-2023-1405 | FF Formidable Forms Strategy11 | 7.5 | Jan 16 | The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present |
| CVE-2023-6842 | FF Formidable Form Builder Strategy11 | 4.8 | Jan 9 | The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name… |
| CVE-2023-6830 | FF Formidable Form Builder Strategy11 | 6.1 | Jan 9 | The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7 |
| CVE-2023-41801 | AC Awp Classifieds Strategy11 | 8.8 | Oct 6 | Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin <= 4.3 versions |
| CVE-2023-2877 | FF Formidable Forms Strategy11 | 8.8 | Jun 27 | The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons |
| CVE-2023-0816 | FF Formidable Form Builder Strategy11 | 6.5 | Mar 27 | The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of… |
| CVE-2023-24419 | FF Formidable Form Builder Strategy11 | 8.8 | Feb 28 | Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 versions |
| CVE-2022-3254 | AC Awp Classifieds Strategy11 | 9.8 | Oct 31 | AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi |
| CVE-2021-24884 | FF Formidable Form Builder Strategy11 | 9.6 | Oct 25 | The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like <audio>,<video>,<img>,<a> and<button>.This could allow an unauthenticated,… |
| CVE-2021-24608 | FF Formidable Form Builder Strategy11 | 4.8 | Oct 25 | The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form's Labels, allowing high privileged… |
| CVE-2021-24251 | BD Business Directory Plugin - Easy Listing Directories Strategy11 | 4.3 | May 6 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to… |
| CVE-2021-24250 | BD Business Directory Plugin - Easy Listing Directories Strategy11 | 5.4 | May 6 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading… |
| CVE-2021-24249 | BD Business Directory Plugin - Easy Listing Directories Strategy11 | 6.5 | May 6 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to… |
| CVE-2021-24248 | BD Business Directory Plugin - Easy Listing Directories Strategy11 | 7.2 | May 6 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a… |
| CVE-2021-24179 | BD Business Directory Plugin - Easy Listing Directories Strategy11 | 8.8 | May 6 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make… |
| CVE-2021-24178 | BD Business Directory Plugin - Easy Listing Directories Strategy11 | 8.8 | May 6 | The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make… |
| CVE-2019-15780 | FF Formidable Form Builder Strategy11 | 9.8 | Aug 29 | The formidable plugin before 4.02.01 for WordPress has unsafe deserialization |
| CVE-2014-10013 | AC Awp Classifieds Strategy11 | – | Jan 13 | SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase… |
| CVE-2014-10012 | AC Awp Classifieds Strategy11 | – | Jan 13 | Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the… |