CVE-2026-17515
MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4's import log file as well as import-related metadata belonging to arbitrary posts.
| Vendor | unknown |
| Product | mlsimport: idx plugin & mls plugin for real estate listings |
| Published | Aug 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown mlsimport: idx plugin & mls plugin for real estate listings
Be the first to know when new unknown vulnerabilities affecting unknown mlsimport: idx plugin & mls plugin for real estate listings are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings
0 < 7.0.4
References
Credits
Shikhali Jamalzade WPScan