MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Security & Risk Analysis

wordpress.org/plugins/mlsimport

If you are the owner of a real estate theme and want to be integrated with MLSimport, feel free to contact us

6K active installs v6.1.10 PHP 7.4+ WP 5.2+ Updated Jan 15, 2026

mlsmls-integrationmultiple-listing-servicesreal-estate-propertiesreal-estate

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Safe to Use in 2026?

Generally Safe

Score 100/100

MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago

Risk Assessment

The "mlsimport" v6.1.10 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by extensively using prepared statements for SQL queries and properly escaping the vast majority of its output. The absence of known CVEs and critical taint analysis issues is also a strong indicator of a relatively secure codebase. However, there are notable security concerns that warrant attention. The plugin exposes a significant attack surface through 22 AJAX handlers, with a substantial portion (10) lacking proper authentication checks. This creates a considerable risk of unauthorized actions being performed by unauthenticated users. Additionally, the presence of 5 unsanitized paths in the taint analysis, while not classified as critical or high, suggests potential vulnerabilities related to file operations or input handling that could be exploited.

Key Concerns

AJAX handlers without authentication checks
Taint analysis flows with unsanitized paths

Vulnerabilities

None known

MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Code Analysis

Dangerous Functions

Raw SQL Queries

27 prepared

Unescaped Output

473 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

96% prepared28 total queries

Output Escaping

86% escaped553 total outputs

Data Flows

5 unsanitized

Data Flow Analysis

8 flows5 with unsanitized paths

mlsimport_stop_import_per_item (admin\class-mlsimport-admin.php:2855)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

10 unprotected

MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Attack Surface

Entry Points22

Unprotected10

AJAX Handlers 22

authwp_ajax_mlsimport_move_files_per_itemincludes\class-mlsimport.php:209

authwp_ajax_mlsimport_stop_import_per_itemincludes\class-mlsimport.php:210

authwp_ajax_mlsimport_saas_get_metadata_functionincludes\class-mlsimport.php:211

authwp_ajax_mlsimport_logger_per_itemincludes\class-mlsimport.php:216

authwp_ajax_mlsimport_move_filesincludes\class-mlsimport.php:217

authwp_ajax_mlsimport_move_files_to_aws_loggerincludes\class-mlsimport.php:218

authwp_ajax_mlsimport_stop_moving_filesincludes\class-mlsimport.php:219

authwp_ajax_mlsimport_delete_cacheincludes\class-mlsimport.php:220

authwp_ajax_mlsimport_clear_fields_dataincludes\class-mlsimport.php:221

authwp_ajax_mlsimport_delete_propertiesincludes\class-mlsimport.php:222

authwp_ajax_mlsimport_test_account_connectionincludes\mlsimport-onboarding.php:45

authwp_ajax_mlsimport_test_mls_connectionincludes\mlsimport-onboarding.php:46

authwp_ajax_mlsimport_run_test_importincludes\mlsimport-onboarding.php:47

authwp_ajax_mlsimport_save_step_dataincludes\mlsimport-onboarding.php:48

authwp_ajax_mlsimport_check_initial_save_neededincludes\mlsimport-progressive-save.php:130

authwp_ajax_mlsimport_save_field_chunkincludes\mlsimport-progressive-save.php:133

authwp_ajax_mlsimport_save_field_optionincludes\mlsimport-progressive-save.php:136

authwp_ajax_mlsimport_save_bulk_importincludes\mlsimport-progressive-save.php:139

authwp_ajax_mlsimport_save_bulk_adminincludes\mlsimport-progressive-save.php:142

authwp_ajax_mlsimport_save_field_positionincludes\mlsimport-progressive-save.php:676

authwp_ajax_mlsimport_save_accountmlsimport.php:467

authwp_ajax_mlsimport_save_mls_datamlsimport.php:522

WordPress Hooks 37

filterwp_prepare_attachment_for_jsenviroment\HouzezClass.php:16

filterimage_downsizeenviroment\HouzezClass.php:17

filterwp_prepare_attachment_for_jsenviroment\RealHomesClass.php:16

filterimage_downsizeenviroment\RealHomesClass.php:17

actiontemplate_redirectincludes\addons\agents_offices.php:177

actionadmin_initincludes\addons\agents_offices.php:274

actioninitincludes\class-mlsimport.php:167

actionadmin_enqueue_scriptsincludes\class-mlsimport.php:183

actionadmin_enqueue_scriptsincludes\class-mlsimport.php:184

actioninitincludes\class-mlsimport.php:187

actionadmin_initincludes\class-mlsimport.php:190

actionsave_postincludes\class-mlsimport.php:191

actionadmin_initincludes\class-mlsimport.php:194

actionadmin_menuincludes\class-mlsimport.php:201

actionadmin_initincludes\class-mlsimport.php:207

actionmlsimport_background_process_per_itemincludes\class-mlsimport.php:213

actionmlsimport_background_process_per_item_inital_batchincludes\class-mlsimport.php:214

actionwp_enqueue_scriptsincludes\class-mlsimport.php:236

actionwp_enqueue_scriptsincludes\class-mlsimport.php:237

filterwp_get_attachment_urlincludes\class-mlsimport.php:238

filtermanage_edit-mlsimport_item_columnsincludes\help_functions.php:2851

actionmanage_posts_custom_columnincludes\help_functions.php:2966

actionadmin_menuincludes\mlsimport-onboarding.php:36

actionadmin_menuincludes\mlsimport-onboarding.php:39

actionadmin_enqueue_scriptsincludes\mlsimport-onboarding.php:42

actionadmin_noticesincludes\mlsimport-onboarding.php:51

actionadmin_initincludes\mlsimport-onboarding.php:54

actionadmin_initincludes\mlsimport-onboarding.php:949

actioninitincludes\mlsimport-onboarding.php:1045

actioninitincludes\mlsimport-progressive-save.php:144

filterget_term_metadataincludes\ThemeImport.php:693

filterintermediate_image_sizes_advancedincludes\ThemeImport.php:833

filterget_term_metadataincludes\ThemeImport.php:1719

actionevent_mls_import_automlsimport.php:121

actionmlsimport_reconciliation_eventmlsimport.php:221

filteraction_scheduler_failure_periodmlsimport.php:257

actioninitmlsimport.php:373

Scheduled Events 2

event_mls_import_auto

mlsimport_reconciliation_event

Maintenance & Trust

MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5

Last updatedJan 15, 2026

PHP min version7.4

Downloads65K

Community Trust

Rating100/100

Number of ratings1

Active installs6K

Alternatives

MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Alternatives

Estatik Real Estate Plugin

estatik

You will love its clean design, simple use, and colorful themes. WordPress real estate plugin Estatik is a worthy choice for single agents and portals

10K 2 unpatched

Optima Express IDX

optima-express

100

Embed real estate property listings, market reports & MLS data on your WordPress site. Responsive design, great SEO & proven lead capture.

8K 1 CVE

Realtyna Organic IDX plugin + WPL Real Estate

real-estate-listing-realtyna-wpl

Your comprehensive solution for creating dynamic and feature-rich real estate websites on WordPress. Designed to cater to the diverse needs of real es …

2K 4 CVEs

Showcase IDX Real Estate Search & Lead Capture

showcase-idx

100

Add MLS listings to your website and capture more leads, all with one plugin! Showcase IDX is a top-performing real estate search plugin that's S …

2K No CVEs

Diverse Solutions IDX Real Estate Listings & MLS Search

dsidxpress

100

Easily add mobile and SEO-friendly MLS listings to your website to attract & engage visitors, plus lead capture tools to turn them into clients.

1K 1 CVE

Developer Profile

MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services) Developer Profile

mlsimport

1 plugin · 6K total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services)

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/mlsimport/build/css/frontend.css/wp-content/plugins/mlsimport/build/js/frontend.js

Script Paths

/wp-content/plugins/mlsimport/build/js/frontend.js

Version Parameters

mlsimport/build/css/frontend.css?ver=mlsimport/build/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes

mlsimport-frontendmlsimport-container

HTML Comments

Data Attributes

data-mlsimport-iddata-mlsimport-property-id

JS Globals

mlsimport_frontend_paramsmlsimport_admin_params

REST Endpoints

/wp-json/mlsimport/v1/get_properties

Shortcode Output

[mlsimport_properties][mlsimport_property_details]

FAQ