Skip to content
PluginCanary

IMPress for IDX Broker

by IDX Broker · 7,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical

Avoid: vulnerability published 13 Oct 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for IMPress for IDX Broker
Ownership100
Maintenance100
Security20
SupportNo data
Reputation60

How the score works

Quick answers

Is IMPress for IDX Broker still maintained?
Yes. Last release 10 Sep 2026, 8 releases in the last 24 months. 10 Sep 2026 · wordpress.org
Who owns IMPress for IDX Broker, and has it changed hands?
No change recorded. Main committer idxco since Sep 2012. 3 Nov 2026 · SVN log
Was IMPress for IDX Broker removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is IMPress for IDX Broker safe?
No. 1 known vulnerability has no fix in the current version. 13 Oct 2026 · Wordfence Intelligence
Is the latest IMPress for IDX Broker update safe to install?
No ownership change before 3.3.1. No one-star spike after it. 10 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 13 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Oct 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
idxco28 Sep 2012 to 10 Sep 2026, 402 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
55 days ago
Releases, 24 months
8
Tested up to
7.0 vs 7.1
Requires PHP
7.1.8 supported 8.2+
Releases per quarter
Releases per quarter for IMPress for IDX Broker
Q1 20240
Q2 20240
Q3 20243
Q4 20241
Q1 20250
Q2 20251
Q3 20251
Q4 20250
Q1 20262
Q2 20261
Q3 20263
Q4 20260

Last release 10 Sep 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.1.

Rating distribution
5 star12
4 star3
3 star5
2 star5
1 star9

Security record

4 vulnerabilities in 24 months (8 on record), 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
13 Oct 2026IMPress for IDX Broker <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.3.1No fixn/a
Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
8 Sep 2026IMPress for IDX Broker <= 3.3.0 - Missing Authorization4.3<= 3.3.03.3.13
8 Sep 2026IMPress for IDX Broker <= 3.3.0 - Unauthenticated Unauthorized Lead and Search Manipulation5.3<= 3.3.03.3.13
31 Mar 2025IMPress for IDX Broker <= 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.2.33.2.432
16 Sep 2024IMPress for IDX Broker <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.2.23.2.340
18 Oct 2021IMPress for IDX Broker <= 3.0.5 - Reflected Cross-Site Scripting6.1< 3.0.63.0.6Patched before disclosure
26 Mar 2020IMPress for IDX Broker <= 2.6.1 - Authenticated Stored Cross-Site Scripting5.4< 2.6.22.6.2Patched before disclosure
26 Mar 2020IMPress for IDX Broker <= 2.6.1 - Authenticated Arbitrary Post Creation, Modification, and Deletion8.1< 2.6.22.6.2Patched before disclosure

Changelog mentions of security fixes: 3.3.1 (authorization).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for IMPress for IDX Broker
4 May 2026133
11 May 2026346
18 May 2026849
25 May 2026506
1 Jun 2026333
8 Jun 2026286
15 Jun 2026277
22 Jun 2026245
29 Jun 2026245
6 Jul 2026266
13 Jul 2026297
20 Jul 2026547
27 Jul 20264,388
3 Aug 20261,238
10 Aug 2026423
17 Aug 2026431
24 Aug 20263,752
31 Aug 2026914
7 Sep 20263,917
14 Sep 20261,530
21 Sep 20261,118
28 Sep 2026558
5 Oct 2026445
12 Oct 2026455
19 Oct 2026451
26 Oct 2026391
2 Nov 202666

Weekly downloads over the last 4 weeks are 62% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WP Job ManagerScore 98 · 70,000+Simple Job BoardScore 96 · 10,000+HireZootScore 94 · 30,000+Business Directory PluginScore 88 · 10,000+Job PostingsScore 86 · 10,000+

Facts

Version3.3.1
AuthorIDX Broker
Added28 Sep 2012
Last updated10 Sep 2026
Active installs7,000+
Requires WordPress5.3
Tested up to7.0.8
Requires PHP7.1.8
CategoryE-commerce & Shopping
TagsIDX, MLS, impress, idx impress, Multiple listing service

Questions

Is IMPress for IDX Broker still maintained?

Yes. Last release 10 Sep 2026, 8 releases in the last 24 months.

Who owns IMPress for IDX Broker, and has it changed hands?

No change recorded. Main committer idxco since Sep 2012.

Was IMPress for IDX Broker removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is IMPress for IDX Broker safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest IMPress for IDX Broker update safe to install?

No ownership change before 3.3.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue