Flexmls Flexmls® Idx Plugin
3 CVEs affecting Flexmls Flexmls® Idx Plugin. Latest disclosed: 2025-03-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0863 | Medium | 6.4 | 2025-03-07 | The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' shortcode in all versions up to, and inc… |
CVE-2024-10552 | Medium | 6.4 | 2025-01-25 | The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘api_key’ and 'api_secret' parameters in all versions up to… |
CVE-2024-8719 | Medium | 6.1 | 2024-10-17 | The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters like 'MaxBeds' and 'MinBeds' in all version… |