Impress For Idx Broker
Approved changes feed: RSS · Atom
cpe:2.3:a:idxbroker:impress_for_idx_broker:*:*:*:*:platinum:wordpress:*:*
part: a version: * update: *
| Vendor | Idxbroker (2ccb51a6-6e0f-5db3-8304-8739bfe809a8) |
|---|---|
| Product | Impress For Idx Broker (9260d571-421d-5777-8ced-376b09f0f28b) |
| Edition | * |
| Language | * |
| Software edition | platinum |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-44047 |
vulnerable | 2026-06-08 06:45:53.497629 |
WordPress IMPress for IDX Broker plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through <= 3.2.2.
Published: 2024-09-17T23:00:54.860Z
Updated: 2026-04-28T16:10:16.984Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9514 |
vulnerable | 2026-06-08 05:28:02.158138 |
Details available
An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user (with the Subscriber role) to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages (via create_dynamic_page and delete_dynamic_page).
Published: 2020-04-07T16:42:51.000Z
Updated: 2024-08-04T10:34:38.231Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11512 |
vulnerable | 2026-06-08 05:16:47.292835 |
Details available
Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subscriber-level) permissions to save arbitrary JavaScript in the plugin's settings panel via the idx_update_recaptcha_key AJAX action and a crafted idx_recaptcha_site_key parameter, which would then be executed in the browser of any administrator visiting the panel. This could be used to create new administrator-level accounts.
Published: 2020-04-07T16:40:34.000Z
Updated: 2024-08-04T11:35:12.392Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.