Flexmls

6 CVEs across 2 Flexmls products. Browse Flexmls vulnerabilities, severities, and proof-of-concept exploits.

Flexmls products with known CVEs

ProductCVEs
Flexmls® Idx3
Flexmls® Idx Plugin3
Flexmls CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25369High7.12026-03-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.Thi…
CVE-2025-67585Medium4.72025-12-09URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a…
CVE-2025-0863Medium6.42025-03-07The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' shortcode in all versions up to, and inc…
CVE-2025-26900Critical9.82025-02-25Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through <…
CVE-2024-10552Medium6.42025-01-25The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘api_key’ and 'api_secret' parameters in all versions up to…
CVE-2024-8719Medium6.12024-10-17The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters like 'MaxBeds' and 'MinBeds' in all version…