High · 7.1 CVE-2024-33924 EUVD-2024-34505GHSA-w5g7-5x2f-5xw9

WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability

Published May 3, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Realtyna Product: Realtyna Organic IDX plugin

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Organic IDX plugin allows Reflected XSS.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.

Affected products

Vendor	Product	Affected	Fixed
Realtyna	Realtyna Organic IDX plugin	≤ 4.14.4	—

References

https://patchstack.com/database/vulnerability/real-estate-listing-realtyna-wpl/wordpress-realtyna-organic-idx-plugin-wpl-real-estate-plugin-4-14-4-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry