Skip to content
OpenAdvisories
High · 7.7 CVE-2026-125852 EUVD-2026-125407GHSA-h47p-x86j-7rpx

WordPress Realtyna Organic IDX plugin plugin <= 5.4.2 - Arbitrary File Deletion vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Path Traversal.This issue affects Realtyna Organic IDX plugin: from n/a through 5.5.0.

Affected products

VendorProductAffectedFixed
Realtyna Realtyna Organic IDX plugin ≤ 5.5.0 —

References