PT-2025-49959 · Unknown · Flexmls Idx

Published 2025-12-09 · Updated 2025-12-15 · CVE-2025-67585

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Flexmls® IDX versions through 3.15.7

Description The software contains an Open Redirect issue, which could allow for phishing attacks. The issue is related to URL redirection to untrusted sites.

Recommendations Update Flexmls® IDX to a version newer than 3.15.7.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-67585

Affected Products

Flexmls Idx

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-67585 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/flexmls-idx/vulnerability/wordpress-flexmls-idx-plugin-3-15-7-open-redirection-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/flexmls-idx/vulnerability/wordpress-flexmls-idx-plugin-3-15-7-open-redirection-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/39254 · Telegram Post
• https://twitter.com/CVEnew/status/2000611273407631526 · Twitter Post