Advisories · Technology

Strategy11 Team Business Directory.

Every CVE that names Strategy11 Team Business Directory among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94173 CVE record

CVSS 5.4 Medium

WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability
- Strategy11 Team Business Directory
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-84769 CVE record

CVSS 6.5 Medium

WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability
- Strategy11 Team Business Directory
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-84758 CVE record

CVSS 6.5 Medium

WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability
- Strategy11 Team Business Directory
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-28004 CVE record

CVSS 7.1 High

WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability
- Strategy11 Team Business Directory
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2026
CVE-2026-61959 CVE record

CVSS 6.5 Medium

WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability
- Strategy11 Team Business Directory
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2026
CVE-2026-57339 CVE record

CVSS 6.6 Medium

WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability
- Strategy11 Team Business Directory
- Broken access control
Not analysed yet 29 Jun 2026
CVE-2026-57328 CVE record

CVSS 6.5 Medium

WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability
- Strategy11 Team Business Directory
- Cross-site scripting (XSS)
Not analysed yet 29 Jun 2026
CVE-2026-57326 CVE record

CVSS 6.5 Medium

WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability
- Strategy11 Team Business Directory
- Cross-site scripting (XSS)
Not analysed yet 29 Jun 2026
CVE-2025-64630 CVE record

CVSS 4.9 Medium

WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability
- Strategy11 Team Business Directory
- Broken access control
Not analysed yet 16 Dec 2025
CVE-2025-67596 CVE record

CVSS 4.3 Medium

WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability
- Strategy11 Team Business Directory
- Cross-site request forgery (CSRF)
Not analysed yet 9 Dec 2025
CVE-2025-64219 CVE record

CVSS 4.3 Medium

WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability
- Strategy11 Team Business Directory
- Broken access control
Not analysed yet 29 Oct 2025