Realtyna Organic IDX plugin + WPL Real Estate vulnerabilities
We track 2 vulnerabilities in Realtyna Organic IDX plugin + WPL Real Estate products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Realtyna Organic IDX plugin + WPL Real Estate vulnerabilities
- 7.1 High severity
Realtyna Organic IDX plugin + WPL Real Estate: Improper Neutralization of Input During Web Page Generation
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser
- 9.8 Critical severity
Realtyna Organic IDX plugin + WPL Real Estate: Unrestricted Upload of File with Dangerous Type
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uploaded files, and its file upload functionality is gated only by an API that is enabled by default and authenticated with hardcoded credentials ship