Realtyna vulnerabilities

We track 9 vulnerabilities in Realtyna products across 4 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.

9vulnerabilities

4critical

5high

0exploited

8.5average CVSS score

Latest Realtyna vulnerabilities

7.7 High severity
Realtyna Organic IDX plugin: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-125852Nov 13, 2026Realtyna
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Path Traversal.This issue affects Realtyna Organic IDX plugin: from n/a through 5.5.0.
8.8 High severity
Realtyna Organic IDX plugin + WPL Real Estate: Unrestricted Upload of File with Dangerous Type
CVE-2026-16236Jul 31, 2026RealtynaEPSS 1.2%
The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages() function combined with an insufficient authorizat
9.8 Critical severity
Realtyna Organic IDX plugin + WPL Real Estate: Unrestricted Upload of File with Dangerous Type
CVE-2026-14483Jul 31, 2026RealtynaEPSS 3.97%
The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function. This is due to missing file type validation in the upload function, combined with
10.0 Critical severity
Realtyna Organic IDX plugin: Improper Control of Generation of Code
CVE-2026-57811Jul 13, 2026Realtyna
Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.
7.5 High severity
Realtyna Organic IDX plugin: Cross-Site Request Forgery
CVE-2025-54052Aug 20, 2025Realtyna
Cross-Site Request Forgery (CSRF) vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows PHP Local File Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.0.0.
7.1 High severity
Realtyna Provisioning: Improper Neutralization of Input During Web Page Generation
CVE-2025-24656Feb 3, 2025Realtyna
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Provisioning realtyna-provisioning allows Reflected XSS.This issue affects Realtyna Provisioning: from n/a through <= 1.2.2.
9.1 Critical severity
Realtyna Organic IDX plugin: Unrestricted Upload of File with Dangerous Type
CVE-2024-38736Jul 12, 2024Realtyna
Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Injection.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.13.
7.1 High severity
Realtyna Organic IDX plugin: Improper Neutralization of Input During Web Page Generation
CVE-2024-33924May 3, 2024Realtyna
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Organic IDX plugin allows Reflected XSS.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.
9.3 Critical severity
Realtyna Organic IDX plugin: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-32128Apr 15, 2024RealtynaEPSS 1.72%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.