IDX Broker vulnerabilities

🔔 Create alert RSS

Published CVEs affecting IDX Broker products: 3 record(s), with severity, exploitation and fixes.

IMPress for IDX Broker 3

Exploited only (KEV) →

CVE-2026-54869 Medium · 6.5 CWE-79 Oct 13, 2026

WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.3.1.

CVE-2026-81788 Medium · 6.3 CWE-862 Sep 10, 2026

WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.

CVE-2026-81787 Medium · 6.5 CWE-288 Sep 10, 2026

WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.