IDX Broker CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM IDX Broker CVE published 2026-10-13

CVE-2026-54869

A Cross Site Scripting (XSS) vulnerability exists in the WordPress IMPress for IDX Broker plugin versions up to 3.3.1. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages viewed by other users. The vulnerability is considered medium severity with a CVSS score of 6.5. Defenders should verify and update the IMPress for IDX Broker plugin to prevent pote [truncated]