homejunction

Products

ProductCVEsExploitedLatest
SpatialMatch IDX2–Mar 26, 2025

Exploited and recent CVEs

  • CVE-2025-28921 High 7.1 WordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-53781 High 7.1 WordPress SpatialMatch IDX plugin <= 3.0.9 - CSRF to Stored XSS vulnerability 0.2%