Vulnerabilities / MLS Import
MLS Import vulnerabilities
Advisories WPSec published for MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings. Other sources may list more. Its attack surface: MLS Import on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-10 | WPSEC-2026-2777 | MLS Import <= 7.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Property JSON-LD Schema | Medium 6.4 | 7.2.7 |
License: CC BY 4.0