Realtyna
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Realtyna Organic IDX plugin | 7 | – | Aug 27, 2026 |
| Realtyna Organic IDX plugin + WPL Real Estate | 2 | – | Jul 31, 2026 |
| Realtyna Provisioning | 1 | – | Feb 3, 2025 |
Exploited and recent CVEs
- CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-16236 Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload 1.2%
- CVE-2026-14483 Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command 4.0%
- CVE-2026-57811 WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability 0.6%
- CVE-2026-45439 WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability 0.3%
- CVE-2025-54052 WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability 0.2%
- CVE-2025-24656 WordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-38736 WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability 0.5%
- CVE-2024-33924 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-32128 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability 1.7%