Rover IDX
Rover IDX has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.
The most common weakness is Authentication Bypass Using An Alternate Path Or Channel, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Rover IDX has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by István Márton. Rover IDX is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-10002Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator
Read the full analysisVulnerability Records

Rover IDX
Author
stevemullen
Turn your WordPress site into a high-performing real estate platform with Rover IDX. Instantly integrate live MLS listings, showcase stunning property pages, and keep your website automatically updated with the latest data. With intuitive customization and broad theme compatibility, Rover IDX makes it easy for agents and brokerages to stand out and convert more visitors into clients. Some key features of Rover IDX include: Customizability It offers extensive customization options, allowing users to tailor the appearance and functionality of property listings on their site. SEO Optimization The plugin is built with SEO in mind, helping improve the visibility of real estate listings in search engine results. Up and running in minutes Activate Rover IDX, choose the MLS region, and add the [rover_idx_listings] shortcode to a page. Boom – your site is displaying searchable real estate listings. You can customize what cities are offered for search, what the search panel looks like, what the listing layout looks like, and how the property details page is displayed. <a href=”https://roveridx.com/documentation/display-searchable-listings-on-a-page/ CRM Integration Rover IDX includes a Customer Relationship Management (CRM), making it easier to manage leads and client interactions. Integration with other CRM’s is available for Follow Up Boss, Top Producer, HighLevel, rechat, and other major CRMs. User-Friendly Interface It is easy to set up and use, even for those with limited technical expertise, with features like shortcode support and SSL compatibility. Terrific support Ask us questions – we are here to help. Have a feature request? Let’s talk about it! Rover IDX stands out for its flexibility and user-friendly approach, making it a popular choice among real estate professionals looking to enhance their online presence
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C