Skip to content
OpenAdvisories

Vendor

Realtyna

10 known vulnerabilities.

Realtyna at a glance

Last 12 months
5
Critical · all time
5
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability, 1 critical Jun July 2026: 3 vulnerabilities, 2 critical August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202610
Jul 202632
Jun 202611
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202510
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202510
Jan 202500
Dec 202400

Products

Realtyna Organic IDX plugin 7 Realtyna Organic IDX plugin + WPL Real Estate 2 Realtyna Provisioning 1
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 7.1
    CVE-2026-78261

    WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.

    Realtyna Realtyna Organic IDX plugin
  • High 8.8
    CVE-2026-16236

    Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload

    The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages() function combined with an insufficient authoriza…

    Realtyna Realtyna Organic IDX plugin + WPL Real Estate Web / CMS
  • Critical 9.8
    CVE-2026-14483 Public exploit Scanner template

    Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command

    The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function. This is due to missing file type validation in the upload function, combined wit…

    Realtyna Realtyna Organic IDX plugin + WPL Real Estate Web / CMS
  • Critical 10.0
    CVE-2026-57811 Public exploit

    WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.

    Realtyna Realtyna Organic IDX plugin
  • Critical 9.3
    CVE-2026-45439

    WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.

    Realtyna Realtyna Organic IDX plugin
  • High 7.5
    CVE-2025-54052

    WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows PHP Local File Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.0.0.

    Realtyna Realtyna Organic IDX plugin
  • High 7.1
    CVE-2025-24656

    WordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Provisioning realtyna-provisioning allows Reflected XSS.This issue affects Realtyna Provisioning: from n/a through <= 1.2.2.

    Realtyna Realtyna Provisioning
  • Critical 9.1
    CVE-2024-38736

    WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Injection.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.13.

    Realtyna Realtyna Organic IDX plugin
  • High 7.1
    CVE-2024-33924

    WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Organic IDX plugin allows Reflected XSS.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.

    Realtyna Realtyna Organic IDX plugin
  • Critical 9.3
    CVE-2024-32128 Scanner template

    WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.

    Realtyna Realtyna Organic IDX plugin