CVE-2026-17515

The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin (pre-7.0.4) is vulnerable due to missing authorization and CSRF protection in an AJAX action, enabling any authenticated user (e.g., a subscriber) to read the plugin’s import log contents and related post metadata. T...