Vulnerabilities / Flexmls® IDX Plugin
Flexmls® IDX Plugin vulnerabilities
Advisories WPSec published for Flexmls® IDX Plugin. Other sources may list more. Its attack surface: Flexmls® IDX Plugin on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-12 | WPSEC-2026-3006 | Flexmls® IDX Plugin <= 4.1.2 - Unauthenticated Reflected Cross-Site Scripting via IDX Search Widget Request URI | Medium 4.7 | 4.2 |
| 2026-11-12 | WPSEC-2026-3005 | Flexmls® IDX Plugin <= 4.1.2 - Unauthenticated Reflected Cross-Site Scripting via IDX Search Widget Location Parameters | Medium 6.1 | 4.2 |
License: CC BY 4.0