SimplyRETS vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SimplyRETS products: 1 record(s), with severity, exploitation and fixes.

SimplyRETS Real Estate IDX 1

Exploited only (KEV) →

CVE-2026-105066 High · 7.1 CWE-79 Oct 14, 2026

WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SimplyRETS SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate IDX: from n/a through 3.2.9.