CVE-2026-54869

MediumCVSS 6.5

Published: 13/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Summary

The IMPress for IDX Broker plugin for WordPress has a Stored XSS vulnerability. This affects all versions from n/a through 3.3.1.

Risk Assessment

Stored XSS may allow an attacker to execute malicious scripts in users' browsers, potentially leading to data theft or session hijacking.

Recommendation

Update the plugin to the latest patched version and scan the site for malicious code.

Other vulnerabilities in IMPress for IDX Broker

See all

CVE-2026-81788Medium
Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.
CVE-2026-81787Medium
Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.3.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS