Skip to content
OpenAdvisories

Vendor

flexmls

6 known vulnerabilities.

Products

Flexmls® IDX 3 Flexmls® IDX Plugin 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-67585

    WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a through <= 3.15.7.

    flexmls Flexmls® IDX
  • Medium 6.4
    CVE-2025-0863

    Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attribut…

    flexmls Flexmls® IDX Plugin Web / CMS
  • Medium 6.4
    CVE-2024-10552

    Flexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters

    The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘api_key’ and 'api_secret' parameters in all versions up to, and including, 3.14.26 due to insufficient input sanitization and output escaping. This makes it pos…

    flexmls Flexmls® IDX Plugin Web / CMS
  • Medium 6.1
    CVE-2024-8719

    Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting

    The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters like 'MaxBeds' and 'MinBeds' in all versions up to, and including, 3.14.22 due to insufficient input sanitization and output escaping. This mak…

    flexmls Flexmls® IDX Plugin Web / CMS