Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

flexmls vulnerabilities

6 published CVEs name flexmls among the affected products.

Published CVEs
6
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 1Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20254
  3. 20261

Newest CVEs

  • CVE-2026-25369

    WordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerability

    flexmls · Flexmls® IDX

    High7.1
  • CVE-2025-67585

    WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability

    flexmls · Flexmls® IDX

    Medium4.7
  • CVE-2025-0863

    Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting

    flexmls · Flexmls® IDX Plugin

    Medium6.4
  • CVE-2025-26900

    WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability

    flexmls · Flexmls® IDX

    Critical9.8
  • CVE-2024-10552

    Flexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters

    flexmls · Flexmls® IDX Plugin

    Medium6.4
  • CVE-2024-8719

    Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting

    flexmls · Flexmls® IDX Plugin

    Medium6.1