CVE-2026-25369

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue affects Flexmls® IDX: from n/a through = 3.15.9...

CVE-2026-25369

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue affects Flexmls® IDX: from n/a through = 3.15.9...

CVE-2026-25369

CVE-2026-25369 is documented as a reflected Cross-Site Scripting vulnerability in the WordPress ecosystem. The connected material identifies Flexmls�a0IDX Plugin (Flexmls IDX, plugin name: flexmls-idx) as affected, with the vulnerable component described as an input handling weakness during web p...

CVE-2025-67585

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a through = 3.15.7...

CVE-2025-67585

CVE-2025-67585 refers to an unauthenticated open redirect in the WordPress plugin Flexmls® IDX (versions up to 3.15.7). Exploitation could enable phishing by redirecting users to untrusted sites. The CVE is documented across multiple sources (NVD, Red Hat, EUVD, CVE list, Wordfence, Patchstack) w...

CVE-2025-67585 WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in flexmls Flexmls® IDX flexmls-idx allows Phishing.This issue affects Flexmls® IDX: from n/a through = 3.15.7...

PT-2025-49959

Name of the Vulnerable Software and Affected Versions Flexmls® IDX versions through 3.15.7 Description The software contains an Open Redirect issue, which could allow for phishing attacks. The issue is related to URL redirection to untrusted sites. Recommendations Update Flexmls® IDX to a version...

EUVD-2024-49371

Malicious code in bioql PyPI...

EUVD-2024-32859

Malicious code in bioql PyPI...

EUVD-2025-5386

Malicious code in bioql PyPI...

EUVD-2025-7370

Malicious code in bioql PyPI...

CVE-2024-10552

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘apikey’ and 'apisecret' parameters in all versions up to, and including, 3.14.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-8719

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters like 'MaxBeds' and 'MinBeds' in all versions up to, and including, 3.14.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2025-0863

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idxframe' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-0863

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idxframe' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-0863 Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idxframe' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-0863 Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idxframe' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-0863

The CVE-2025-0863 entry concerns the Flexmls IDX Plugin for WordPress. It describes a Stored Cross-Site Scripting vulnerability in the idx_frame shortcode present in all versions up to 3.14.27, caused by insufficient input sanitization and output escaping of user-supplied attributes. Exploitation...

WordPress Flexmls® IDX plugin <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Flexmls® IDX versions = 3.14.28...

CVE-2025-26900

Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through = 3.14.27...