Skip to content
OpenAdvisories

Vendor

Realtyna

11 known vulnerabilities.

Products

Realtyna Organic IDX plugin 8 Realtyna Organic IDX plugin + WPL Real Estate 2 Realtyna Provisioning 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-14483 Public exploit Scanner template

    Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command

    The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function. This is due to missing file type validation in the upload function, combined wit…

    Realtyna Realtyna Organic IDX plugin + WPL Real Estate Web / CMS
  • Critical 10.0
    CVE-2026-57811 Public exploit

    WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.

    Realtyna Realtyna Organic IDX plugin
  • Critical 9.3
    CVE-2026-45439

    WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.

    Realtyna Realtyna Organic IDX plugin
  • Critical 9.1
    CVE-2024-38736

    WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Injection.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.13.

    Realtyna Realtyna Organic IDX plugin
  • Critical 9.3
    CVE-2024-32128 Scanner template

    WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.

    Realtyna Realtyna Organic IDX plugin