Critical · 9.1 CVE-2024-38736 EUVD-2024-37584GHSA-pw74-hq2f-c2j4

WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability

Published Jul 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Realtyna Product: Realtyna Organic IDX plugin

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Injection.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.13.

Affected products

Vendor	Product	Affected	Fixed
Realtyna	Realtyna Organic IDX plugin	≤ 4.14.13	—

References

https://patchstack.com/database/vulnerability/real-estate-listing-realtyna-wpl/wordpress-realtyna-organic-idx-plugin-4-14-13-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry