SecAlerts
CVE ListPricingSign Up
strategy11 logo

strategy11

Security Risk Profile

31
/100
low

Security Risk Score

Comprehensive risk assessment based on 37 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from January 13, 2015 to present

37
Total CVEs
15
Critical+High
0
Exploited
10
Unpatched

Threat Assessment

Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
10
Critical/High
Risk Level
31/100
low

Severity Distribution

Critical
4
High
11
Medium
22
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
5

Age Distribution

Common Weaknesses (CWE)

1
XSS
13
2
CSRF
10
3
Code Injection
2
4
SQL Injection
2
5
Infoleak
1

Most Affected Products

1. Strategy11 Formidable Form Builder Wordpress9
2. Strategy11 Formidable Forms Wordpress8
3. Strategy11 Business Directory Plugin - Easy Listing Directories Wordpress6
4. Strategy11 Awp Classifieds Wordpress5
5. Awpcp Another Wordpress Classifieds Plugin Wordpress4

Recent Vulnerabilities

See more →
CVE-2026-42726
CVSS 6.5medium

WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

5/27/2026🔧 No Patch
CVE-2025-62131
CVSS 4.3medium

WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability

12/31/2025🔧 No Patch
CVE-2025-62132
CVSS 4.3medium

WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability

12/31/2025🔧 No Patch
CVE-2025-64630
CVSS 4.9medium

WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability

12/16/2025🔧 No Patch
CVE-2025-67596
CVSS 4.3medium

WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability

12/9/2025🔧 No Patch
CVE-2025-64219
CVSS 4.3medium

WordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability

10/29/2025🔧 No Patch
CVE-2025-57928
CVSS 5.3medium

WordPress AWP Classifieds plugin <= 4.4.3 - Content Injection vulnerability

9/22/2025🔧 No Patch
CVE-2025-31440
CVSS 7.1EPSS 0%high

WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

3/28/2025🔧 No Patch
CVE-2022-45806
CVSS 9.8critical

WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

12/13/2024
CVE-2024-11188
CVSS 6.1medium

Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter

11/23/2024🔧 No Patch

Monitor strategy11 in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.