Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ReichertBrothers Clear all filters
TI-2025-22281 CVE-2025-31011 · GHSA-7qjh-m8m2-899r

WordPress SimplyRETS Real Estate IDX plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This issue affects SimplyRETS Real Estate…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00242 Published 2025-04-15 No fix listed CWE-79
TI-2025-22280 CVE-2025-31010 · GHSA-p3q9-8vf2-3jfg

WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross Site Request Forgery.This issue affects SimplyRETS Real Estate IDX: from n/a through <= 3.0.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00163 Published 2025-03-28 No fix listed CWE-352
TI-2024-11591 CVE-2024-12491 · GHSA-3hxc-wcg4-238w

SimplyRETS Real Estate IDX <= 2.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sr_search_form' shortcode in all versions up to, and including, 2.11.3 due to insufficient input sanitiza…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00346 Published 2025-01-09 No fix listed CWE-79