Idxbroker Impress For Idx Broker vulnerabilities

CVE-2020-9514 [MEDIUM] CWE-862 CVE-2020-9514: An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.ph An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user (with the Subscriber role) to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages (via create_dynamic_page and delete_dynamic_page).

CVE-2020-11512 [MEDIUM] CWE-79 CVE-2020-11512: Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attacker Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subscriber-level) permissions to save arbitrary JavaScript in the plugin's settings panel via the idx_update_recaptcha_key AJAX action and a crafted idx_recaptcha_site_key parameter, which would then be executed in the browser of any ad

CVE-2024-44047 [MEDIUM] CWE-79 CVE-2024-44047: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through <= 3.2.2.