Flexmls
6 CVEs across 2 Flexmls products. Browse Flexmls vulnerabilities, severities, and proof-of-concept exploits.
Flexmls products with known CVEs
Flexmls CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-25369 | High | 7.1 | 2026-03-16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.Thi… |
CVE-2025-67585 | Medium | 4.7 | 2025-12-09 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a… |
CVE-2025-0863 | Medium | 6.4 | 2025-03-07 | The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' shortcode in all versions up to, and inc… |
CVE-2025-26900 | Critical | 9.8 | 2025-02-25 | Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through <… |
CVE-2024-10552 | Medium | 6.4 | 2025-01-25 | The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘api_key’ and 'api_secret' parameters in all versions up to… |
CVE-2024-8719 | Medium | 6.1 | 2024-10-17 | The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters like 'MaxBeds' and 'MinBeds' in all version… |