Realtyna

Products

ProductCVEsExploitedLatest
Realtyna Organic IDX plugin7–Aug 27, 2026
Realtyna Organic IDX plugin + WPL Real Estate2–Jul 31, 2026
Realtyna Provisioning1–Feb 3, 2025

Exploited and recent CVEs

  • CVE-2026-78261 High 7.1 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-16236 High 8.8 Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload 1.2%
  • CVE-2026-14483 Critical 9.8 Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command 4.0%
  • CVE-2026-57811 Critical 10.0 WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability 0.6%
  • CVE-2026-45439 Critical 9.3 WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability 0.3%
  • CVE-2025-54052 High 7.5 WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability 0.2%
  • CVE-2025-24656 High 7.1 WordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38736 Critical 9.1 WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2024-33924 High 7.1 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-32128 Critical 9.3 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability 1.7%