Easy MLS Listings Import
Easy MLS Listings Import has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Easy MLS Listings Import has a vendor fix available, so running the current release closes it.
All of these findings were reported by Peter Thaleikis. Easy MLS Listings Import is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-12525Easy MLS Listings Import <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Easy MLS Listings Import
Author
Home ASAP
Easy MLS Listings Import by Home ASAP lets you easily display a real estate agent’s MLS listings and/or their office listings on any WordPress site. Even better, listing information updates automatically to save you work with updating, removing, and adding new listings. That way you can set it and forget it. EASY SETUP Setup takes only minutes. Just create a free Real Estate Agent Directory account, connect your agent’s listings, and place a shortcode where you want the listings to appear. We take care of the heavy lifting of connecting to IDX feeds for you. EASY MAINTENANCE Our system automatically updates MLS listing information every 5 minutes, so visitors always get the most up to date information. That means you no longer have to add, remove, or update listings yourself when listings go on or off the market. FLEXIBLE STYLING Listings are presented in an attractive grid layout that adjusts to the visitor’s screen size. Background colors and dimensions can be customized to fit your design. ALL THE INFO When users click on a listing, a new tab will open containing the property description, amenities, photos, maps, and more. Plus, we include the details homebuyers demand such as nearby schools, neighborhood demographics, weather, and nearby attractions. Built-In Lead Capture Of course, most agents want one thing from a website, and that’s leads. That is why we include built-in lead capture forms that allow visitors to easily connect to new buyers. TOTALLY FREE Oh…and did we mention you get all this for free? Plus, agents get access to lots of other great tools for marketing on Facebook with their free Real Estate Agent Directory membership. Setup Requirements Real Estate Agent Directory account (Free) – Easy MLS Listings Import works by integrating with the Real Estate Agent Directory. This free service can be set up by an agent or their developer in only a few minutes. Plus, agents get access to a ton of free benefits from the largest directory of its kind on Facebook at over 600,000 members and growing. Click here to learn more. External services This plugin relies on the HomeASAP service to provide MLS/IDX listing data. It is the entire purpose of the plugin: without a HomeASAP subscription there is nothing for it to display. Agent lookup (admin only). When you type a name or e-mail into the agent search box on the plugin’s settings page, that search term is sent to https://api.homeasap.com so we can return matching Real Estate Agent Directory profiles. Nothing is sent until you type in that box. Listing display (front end). The shortcode embeds an iframe served from https://homeasap.com. As with any embedded frame, the visitor’s browser connects to homeasap.com directly, which receives the visitor’s IP address, user agent and the referring page. HomeASAP terms of use: https://dashboard.homeasap.com/Directory/TermsOfUse HomeASAP privacy policy: https://about.homeasap.com/home-asap-privacy-policy/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C