Approved changes feed: RSS · Atom

cpe:2.3:a:flexmls:flexmls®_idx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFlexmls (e14c5f29-09a3-5237-b11c-b42153a2c5d9)
ProductFlexmls® Idx (472dd149-db1c-544b-a524-f0b01089c01d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25369 vulnerable 2026-06-08 07:53:19.717320 WordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue affects Flexmls® IDX: from n/a through <= 3.15.9.
Published: 2026-03-16T14:13:48.908Z
Updated: 2026-05-11T20:50:26.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67585 vulnerable 2026-06-08 07:41:20.034404 WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability
MEDIUM (4.7)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a through <= 3.15.7.
Published: 2025-12-09T14:14:16.160Z
Updated: 2026-04-28T19:24:45.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26900 vulnerable 2026-06-08 07:14:50.643636 WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through <= 3.14.27.
Published: 2025-02-25T14:17:52.993Z
Updated: 2026-04-28T16:11:42.643Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.