Rover IDX WordPress Plugin

Rover IDX

Rover IDX is a WordPress plugin with the following stats:

#4,195 Global Rank

200+ active installs

4.8/5 24 ratings

Since 2016 10 years active

Vulnerabilities

2 Total

2 Patched

0 Active

100% Resolved rate

Rover IDX <= 3.0.0.2905 - Authenticated (Subscriber+) Authentication Bypass to Administrator

CWE-288 · Authentication Bypass Using an Alternate Path or Channel

The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905. This is due to insufficient validation and capability check on the 'rover_idx_refresh_social_callback' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in to administrator. The vulnerability is partially patched in version 3.0.0.2905 and fully patched in version 3.0.0.2906.

8.8 High Affected All – 3.0.0.2905 Patched in ✓ 3.0.0.2906 Published 21 Oct 2024 CVE CVE-2024-10002

Rover IDX <= 3.0.0.2903 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

CWE-862 · Missing Authorization

The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3.0.0.2903. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options.

6.3 Medium Affected All – 3.0.0.2903 Patched in ✓ 3.0.0.2905 Published 21 Oct 2024 CVE CVE-2024-10003

About Rover IDX

Rover IDX displays searchable, mobile-friendly MLS listings on your site, using customizable layouts.

Turn your WordPress site into a high-performing real estate platform with Rover IDX. Instantly integrate live MLS listings, showcase stunning property pages, and keep your website automatically updated with the latest data. With intuitive customization and broad theme compatibility, Rover IDX makes it easy for agents and brokerages to stand out and convert more visitors into clients.

Some key features of Rover IDX include:

Customizability

It offers extensive customization options, allowing users to tailor the appearance and functionality of property listings on their site.

SEO Optimization

The plugin is built with SEO in mind, helping improve the visibility of real estate listings in search engine results.

Up and running in minutes

Activate Rover IDX, choose the MLS region, and add the [rover_idx_listings] shortcode to a page. Boom – your site is displaying searchable real estate listings. You can customize what cities are offered for search, what the search panel looks like, what the listing layout looks like, and how the property details page is displayed. <a href=”https://roveridx.com/documentation/display-searchable-listings-on-a-page/

CRM Integration

Rover IDX includes a Customer Relationship Management (CRM), making it easier to manage leads and client interactions. Integration with other CRM’s is available for Follow Up Boss, Top Producer, HighLevel, rechat, and other major CRMs.

User-Friendly Interface

It is easy to set up and use, even for those with limited technical expertise, with features like shortcode support and SSL compatibility.

Terrific support

Ask us questions – we are here to help. Have a feature request? Let’s talk about it!

Rover IDX stands out for its flexibility and user-friendly approach, making it a popular choice among real estate professionals looking to enhance their online presence

Screenshots

Setting up Rover IDX is a breeze

Type in the name or broker last name of the office, and select the active agents. You can set meta data for the agents as well.

Choose from any of the listing layout templates that ship with Rover IDX, or build your own.

Super easy to add searchable pages - [rover_idx_full_page] creates a fully searchable page with search panel, listing results, and in 2-column mode a sidebar with highlighted listings.

Simple, clean layouts for highly usable pages.

Don't forget to include a map. Visitors love maps!

Easy add links to your sidebar, footer, or page. These links take advantage of the Rover IDX dynamic url feature. If the page does not exist in your website, Rover IDX will parse the url, hoping that the url is calling for searchable listings specified by the url. See https://roveridx.com/features/roverurl/ for more information.

Frequently Asked Questions

Does Rover IDX work with any theme?

Yes, as long as the theme follows WordPress conventions. Themes created for WordPress 3+ are better.

How is Rover IDX priced?

See https://roveridx.com/resources/pricing/ for pricing.

If I have multiple websites with Rover IDX, can I tie them together?

Yes! Rover IDX has a ‘link this website’ feature that allows you and your clients to log into any of the websites and manage their settings and criteria.

Does Rover IDX work with my MLS region?

We work with hundreds of MLS’s, and that list is growing every month. Please see https://roveridx.com/resources/mls-coverage/If we don’t currently have your MLS region, we are happy to investigate adding it. We do all the paperwork (except your signatures), and setting up a new region usually takes 2-3 days.

Changelog

4.0.0.2825

Improve handling of multiple listings blocks on single page
Improve firewall rule handling

4.0.0.2821

Fix sitemap inconsistencies with multi-region setup
Introduce performance optimization with multiple shortcodes on page

4.0.0.2812

Disable custom hostname to IP address mappings for DNS resolution

4.0.0.2811

Improve compatability with older php 7 versions

4.0.0.2807

Improve url parsing for multi-region sites

4.0.0.2806

Add batcache (Pressable) to caches we automatically manage

4.0.0.2805

Rover IDX Listing block – resolve js dependency loading

4.0.0.2804

Prevent SQL injection attack within rover_idx_site_search

Fix Rover IDX Listing block

4.0.0.2803

Fix Rover IDX Listing block
Support block-theme page templates enabled

4.0.0.2799

Fix error on WordPress 6.9 upgrade

4.0.0.2763

Fix critical error on error path

4.0.0.2759

Improve third party interoperability with SEO plugins

4.0.0.2732

Release Rover IDX 4.0, with significant performance and customizability improvements. See https://roveridx.com/rover-idx-4-0-is-coming/.

3.0.0.2661

Tested up to WordPress 6.1

3.0.0.2660

Fix issue that prevented auto-blog images from being correctly posted

3.0.0.2654

Improve date formatting for auto-blog posts

3.0.0.2647

[rover_idx_links] Fix error when no parameters given in shortcode

3.0.0.2627

Fix intermittent crash when changing permalinks

3.0.0.2619

Fix for page with same slug structure as property page

3.0.0.2615

Fix for WordPress 6.0 do_parse_request issue

3.0.0.2613

Rover IDX is WordPress 6.0-ready

3.0.0.2611

Fix bug affecting display of sitemap history

3.0.0.2605

Improve RankMath integration.

3.0.0.2604

Fix for egregious Contact Form 7 bug that vendor is ignoring.

3.0.0.2531

Add missing file

3.0.0.2527

IMPORTANT: Sitemaps moved to root of site
Improve integration for Yoast SEO plugin
Add integration for SEO Framework plugin
Add integration for All in One SEO plugin
Add integration for Rank Math SEO
Add integration for SEOPress
Add integration for Squirrly SEO

3.0.0.2480

When changing MLS region, also update other key settings

3.0.0.2400

Fix for critical error loading seo panel for some configurations

3.0.0.2397

Validate IP Resolve address which memcached seems to sometimes typecast to an integer

3.0.0.2392

New parseable email feature for Top Producer, Zapier and other CRM integration

3.0.0.2387

WordPress 5.8 certified

3.0.0.2385

Resolve php warning for missing HTTP_ACCEPT request header

3.0.0.2371

Add ability to add custom classes to more parts of the Login / Register menu

3.0.0.2363

Improve Login / Register menu layout

3.0.0.2353

Relax connection timeout limit for slower shared hosting

3.0.0.2350

Fix build upload error

3.0.0.2349

Improve blog post url structure

3.0.0.2244

WordPress 5.7 certified

3.0.0.2235

Fix url regression on setup
Relax connect timeout for slower shared servers

3.0.0.2215

Fix menu slug error

3.0.0.2214

Improve auto-blogging duplication handling
Allow configurable endpoint

3.0.0.2193

Modify menu html to prevent display:block interfering with layout

3.0.0.2140

Testing up to WordPress 5.6
Resolve php 7 warning on styling

3.0.0.2133

Resolve php 7 warning on setup

3.0.0.2095

Improve datetime mgmt for auto-blogging
Improve menu layout

3.0.0.2057

Improve dropdown Login / Register menu structure for some themes

3.0.0.2053

resolve undeclared ROVER_JS
For some themes, add presentation span for dropdown Login / Register menu

3.0.0.2028

preload important css during activation

3.0.0.2024

Improve support for Yoast premium plugin and Rover IDX dynamic page titles

3.0.0.1861

resolve logging error

3.0.0.1860

resolve kit error

3.0.0.1859

Performance: Refactor javascript loading for significant performance
Performance: Remove all jQuery dependancy. Your theme can now dequeue jQuery, for faster page loads
Performance: Searches are now faster
Customization: Search panel colors can now be changed via plugin settings
Usability: Mobile touch Slideshow now available for many listing layouts

2.1.0.2192

Performance: Tune javascript loading for significant performance boost

2.1.0.2105

Performance: Faster DNS lookup for faster page loads.
Allow selecting default page template for dynamic page layouts

2.1.0.2080

Feature: Ability to add Favorites and Saved Searches menus to WordPress menu.

2.1.0.2043

improve auto-blogging tracking
improve auto-blog titles

2.1.0.2042

deactivation and reactivation could result in some settings being lost
add logging to detect settings changes

2.1.0.2041

Fix php warning on hosts displaying warnings

2.1.0.2034

Avoid situation where non-expanded shortcode can appear in cached page

2.1.0.2027

Upgrade admin panels to Bootstrap 4

2.1.0.1985

Fix Social key mismatch for auto-blogging

2.1.0.1985

Add reset feature to clear WordPress options

2.1.0.1978

Fix setup issue that resulted in incomplete data being saved to WordPress options

2.1.0.1971

Complete testing for WordPress 5.1 support – no issues

2.1.0.1755

Minor fix for multi-region handling

2.1.0.1749

Rover IDX 2.1.0 release

2.1.0.1327

Tested up to WordPress 4.9 / add capability to exclude url slugs / additional debug capability

2.1.0.1326

Add helpful debug / php 7 check for item existence

2.1.0.1325

Improve logic of url parsing to avoid conflict with third party plugin

2.1.0.1324

Improve reliability of sitemap when allow_url_fopen is disabled

2.1.0.1323

Fix PHP 7 incompatibility with affordability calculator

2.1.0.1318

Fix regression in previous release

2.1.0.1317

Improve admin_notices to warn administrator when activated Rover plugin needs a region to be selected

2.1.0.1316

Improve algorithm that decides to load js / css from cdn for performance

2.1.0.1315

add back old [rover_idx_login shortcode] that has been removed before 2.0 was released
improve reliability of email unsubscribe

2.1.0.1314

prepare for new feature – custom, non-MLS listings
default system pages (/rover-control-panel/, /rover-custom-listing-panel/) to naked page template for maximum screen real estate
improved reliability of automatic sitemap generation

2.1.0.1313

added ‘Search Panel Orientation’ radio button to Rover Omni Search, Rover – Search by MLS Number, and Rover – Search by School widgets

2.1.0.1312

quick search widget now defaults to price range dropdown, which is more mobile friendly
declare support for WordPress 4.8

2.1.0.1309

added help text to Rover IDX >> SEO >> Dynamic Page Definitions
improved reliability of automatic sitemap generation

2.1.0.1308

quick fix for regression in 1307

2.1.0.1307

Improve reliability of automatic sitemap generation
Fix error when loading rover-control-panel using the naked_page.php template

2.1.0.1306

PHP warning for admin panel
Load help (Rover IDX >> Help) over https

2.1.0.1304

Remove empty ‘Last’ label from recently viewed widget
Resolve issue with selected cities not being passed to new and updated widget

2.1.0.1302

Improve custom template – no longer need to create a page using that template to see template in dropdown
Default dynamic page post_type to page
Follow WP codex example to return custom template, and not exit

2.1.0.1301

Fix strpos() issue for older Rover version upgrades

2.1.0.1294

Fix uncommon path that could result in css not loaded for back end plugin

2.1.0.1274

New search panels!
Facebook Login!
Property Highlight Banners!
Map polygon search for visitors!
Automatically add Login / Register to WordPress menu!
New rover_idx_registration shortcode – highly customizable!
New rover_idx_contact shortcode – highly customizable!

1.2.6.1733

Resolve parse error on old unsupported php versions

1.2.6.1731

Improve saving of Styling settings to WordPress options.

1.2.6.1605

Rover IDX will now process Diverse Solutions shortcodes and IDX Data Filters.

1.2.6.1604

Avoid duplicating Rover shortcode button on Visual tab when editing Post / Page
Add ‘listings per row’ to Styling >> Listings page settings
Use key ‘search_panel_layout’ for all quick search widgets
Allow “Print” to work correctly when in a property details dialog (worked correctly in a new window)