Vulnerabilities in flexmls
6 resultsCVE-2025-26900CRITICALWordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2024-10552MEDIUMFlexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parametersEPSS 0.3%CVE-2024-8719MEDIUMFlexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2025-0863MEDIUMFlexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-67585MEDIUMWordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerabilityEPSS 0.2%CVE-2026-25369HIGHWordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%