flexmls

Products

ProductCVEsExploitedLatest
Flexmls® IDX3–Mar 16, 2026
Flexmls® IDX Plugin3–Mar 7, 2025

Exploited and recent CVEs

  • CVE-2026-25369 High 7.1 WordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67585 Medium 4.7 WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability 0.2%
  • CVE-2025-0863 Medium 6.4 Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-26900 Critical 9.8 WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability 0.6%
  • CVE-2024-10552 Medium 6.4 Flexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters 0.3%
  • CVE-2024-8719 Medium 6.1 Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting 0.3%