| CVE-2026-18331
| FFFormidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More strategy11team | 7.2 | | Aug 26 | Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter |
| CVE-2026-5100
| ACAWP Classifieds strategy11team | 7.5 | | May 5 | AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions' |
| CVE-2026-2888
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 5.3 | | Mar 13 | Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter |
| CVE-2026-2890
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 7.5 | | Mar 13 | Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse |
| CVE-2026-1656
| BDBusiness Directory Plugin – Easy Listing Directories for WordPress strategy11team | 5.3 | | Feb 18 | Business Directory Plugin <= 6.4.20 - Missing Authorization to Unauthenticated Arbitrary Listing Modification |
| CVE-2026-2576
| BDBusiness Directory Plugin – Easy Listing Directories for WordPress strategy11team | 7.5 | | Feb 18 | Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter |
| CVE-2024-13887
| BDBusiness Directory Plugin – Easy Listing Directories for WordPress strategy11team | 5.3 | | Mar 13 | Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition |
| CVE-2024-11188
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 6.1 | | Nov 23 | Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter |
| CVE-2017-20194
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 5.3 | | Oct 16 | Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure |
| CVE-2017-20192
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 6.1 | | Oct 16 | Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2024-6725
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 5.4 | | Jul 31 | Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2023-5527
| BDBusiness Directory Plugin – Easy Listing Directories for WordPress strategy11team | 8.0 | | Jun 18 | Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection |
| CVE-2024-4443
| BDBusiness Directory Plugin – Easy Listing Directories for WordPress strategy11team | 7.5 | | May 22 | Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter |
| CVE-2024-0660
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 4.3 | | Feb 5 | Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting |
| CVE-2023-6830
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 6.1 | | Jan 9 | Formidable Forms <= 6.7 - HTML Injection |
| CVE-2023-6842
| FFFormidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder strategy11team | 4.8 | | Jan 9 | Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting |
