{"items":[{"id":"CVE-2026-25369","published":"2026-03-16T14:13:48.908Z","updated":"2026-05-11T20:50:26.639Z","title":"WordPress Flexmls® IDX plugin <= 3.15.9 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"flexmls","product":"Flexmls® IDX","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2025-67585","published":"2025-12-09T14:14:16.160Z","updated":"2026-04-28T19:24:45.499Z","title":"WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability","severity":"MEDIUM","score":4.7,"vendor":"flexmls","product":"Flexmls® IDX","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2025-0863","published":"2025-03-07T07:22:23.140Z","updated":"2026-04-08T16:40:26.560Z","title":"Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"flexmls","product":"Flexmls® IDX Plugin","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2025-26900","published":"2025-02-25T14:17:52.993Z","updated":"2026-04-28T16:11:42.643Z","title":"WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 -  PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"flexmls","product":"Flexmls® IDX","kev":false,"epss":0.00603,"kevAdded":null},{"id":"CVE-2024-10552","published":"2025-01-25T06:40:38.087Z","updated":"2026-04-08T16:33:37.577Z","title":"Flexmls® IDX Plugin <= 3.14.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via API parameters","severity":"MEDIUM","score":6.4,"vendor":"flexmls","product":"Flexmls® IDX Plugin","kev":false,"epss":0.00326,"kevAdded":null},{"id":"CVE-2024-8719","published":"2024-10-17T03:32:50.462Z","updated":"2026-04-08T17:14:27.674Z","title":"Flexmls® IDX Plugin <= 3.14.22 - Reflected Cross-Site Scripting","severity":"MEDIUM","score":6.1,"vendor":"flexmls","product":"Flexmls® IDX Plugin","kev":false,"epss":0.00317,"kevAdded":null}]}