Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Strategy11 Team — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting Strategy11 Team. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Strategy11 Team develops WordPress plugins for business management solutions, with their core use case involving workflow automation and client management tools. Historically, their vulnerabilities have commonly included stored cross-site scripting (XSS), server-side request forgery (SSRF), and authentication bypass flaws, often stemming from insufficient input validation and improper access controls. The team has addressed multiple critical remote code execution vulnerabilities in their products, with their CVE record reflecting persistent security challenges in user permission handling and data sanitization. While no major public security incidents have been documented, their vulnerability history indicates a pattern of issues related to privilege escalation and insecure direct object references, requiring ongoing security remediation efforts.

CVE IDTitleCVSSSeverityPublished
CVE-2026-61959 WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability — Business DirectoryCWE-79 6.5 Medium2026-08-06
CVE-2026-59550 WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability — AWP ClassifiedsCWE-89 9.3 Critical2026-07-27
CVE-2026-65469 WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability — AWP ClassifiedsCWE-862 5.3 Medium2026-07-23
CVE-2026-57339 WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability — Business DirectoryCWE-862 6.6 Medium2026-06-29
CVE-2026-57328 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability — Business DirectoryCWE-79 6.5 Medium2026-06-29
CVE-2026-57326 WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability — Business DirectoryCWE-79 6.5 Medium2026-06-29
CVE-2026-42726 WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability — AWP ClassifiedsCWE-862 6.5 Medium2026-05-27
CVE-2026-24593 WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability — AWP ClassifiedsCWE-497 5.3 Medium2026-01-23
CVE-2025-62131 WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability — Tasty Recipes LiteCWE-862 4.3 Medium2025-12-31
CVE-2025-62132 WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability — Tasty Recipes LiteCWE-862 4.3 Medium2025-12-31
CVE-2025-64630 WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability — Business DirectoryCWE-862 4.9 Medium2025-12-16
CVE-2025-67596 WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability — Business DirectoryCWE-352 4.3 Medium2025-12-09
CVE-2025-64219 WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability — Business DirectoryCWE-862 4.3 Medium2025-10-29
CVE-2025-57928 WordPress AWP Classifieds plugin <= 4.4.3 - Content Injection vulnerability — AWP ClassifiedsCWE-80 5.3 Medium2025-09-22
CVE-2025-31440 WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability — Terms of UseCWE-352 7.1 High2025-03-28

This page lists every published CVE security advisory associated with Strategy11 Team. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.