Plugin icon

Flexmls® IDX Plugin

flexmls-idx

Vulnerabilities:

6

Last Updated:

September 17, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-03-16
Title
Flexmls® IDX Plugin < 3.15.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.15.10
CVSS
6.1 (medium)
Published
2025-11-29
Title
Flexmls® IDX < 3.15.8 - Unauthenticated Open Redirect
Fixed in
Fixed in 3.15.8
CVSS
3.4 (low)
Published
2025-03-06
Title
Flexmls® IDX < 3.14.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.14.29
CVSS
6.4 (medium)
Published
2025-02-22
Title
Flexmls® IDX < 3.14.28 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.14.28
CVSS
9.8 (critical)
Published
2025-01-24
Title
Flexmls® IDX Plugin < 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters
Fixed in
Fixed in 3.14.27
CVSS
6.4 (medium)
Published
2024-10-16
Title
Flexmls® IDX Plugin < 3.14.23 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.14.23
CVSS
6.1 (medium)