flexmls vulnerabilities
6 published CVEs name flexmls among the affected products.
- 6Published CVEs6 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-25369
WordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerability
flexmls · Flexmls® IDX
High7.1 - CVE-2025-67585
WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability
flexmls · Flexmls® IDX
Medium4.7 - CVE-2025-0863
Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
flexmls · Flexmls® IDX Plugin
Medium6.4 - CVE-2025-26900
WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability
flexmls · Flexmls® IDX
Critical9.8 - CVE-2024-10552
Flexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters
flexmls · Flexmls® IDX Plugin
Medium6.4 - CVE-2024-8719
Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting
flexmls · Flexmls® IDX Plugin
Medium6.1