What’s Vulnerable › Products

Flexmls® IDX vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Flexmls® IDX version is affected

Latest Flexmls® IDX vulnerabilities

• CVE-2026-25369 — WordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-67585 — WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability (CVSS 4.7)
• CVE-2025-26900 — WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability (CVSS 9.8)