Read the docs

ReichertBrothers

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ReichertBrothers records in CISA KEV

No ReichertBrothers vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-22281 CVE-2025-31011 · GHSA-7qjh-m8m2-899r

WordPress SimplyRETS Real Estate IDX plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00242 Published 2025-04-15 No fix listed CWE-79
TI-2024-11591 CVE-2024-12491 · GHSA-3hxc-wcg4-238w

SimplyRETS Real Estate IDX <= 2.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sr_search_form' shortcode in all versions up to, and including, 2.11.3 due to insufficient input sanitiza…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00346 Published 2025-01-09 No fix listed CWE-79
TI-2025-22280 CVE-2025-31010 · GHSA-p3q9-8vf2-3jfg

WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross Site Request Forgery.This issue affects SimplyRETS Real Estate IDX: from n/a through <= 3.0.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00163 Published 2025-03-28 No fix listed CWE-352
Open these records in search →