CVE-2026-73354

Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.

Credits

V1T | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/simply-rets/vulnerability/wordpress-simplyrets-real-estate-idx-plugin-3-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve