Realtyna Organic IDX plugin vulnerabilities

6 known vulnerabilities in Realtyna Organic IDX plugin from Realtyna. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Realtyna Organic IDX plugin: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-125852Nov 13, 2026Realtyna

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Path Traversal.This issue affects Realtyna Organic IDX plugin: from n/a through 5.5.0.

• 10.0 Critical severity

  Realtyna Organic IDX plugin: Improper Control of Generation of Code

  CVE-2026-57811Jul 13, 2026Realtyna

  Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.

• 7.5 High severity

  Realtyna Organic IDX plugin: Cross-Site Request Forgery

  CVE-2025-54052Aug 20, 2025Realtyna

  Cross-Site Request Forgery (CSRF) vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows PHP Local File Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.0.0.

• 9.1 Critical severity

  Realtyna Organic IDX plugin: Unrestricted Upload of File with Dangerous Type

  CVE-2024-38736Jul 12, 2024Realtyna

  Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Injection.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.13.

• 7.1 High severity

  Realtyna Organic IDX plugin: Improper Neutralization of Input During Web Page Generation

  CVE-2024-33924May 3, 2024Realtyna

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Organic IDX plugin allows Reflected XSS.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.

• 9.3 Critical severity

  Realtyna Organic IDX plugin: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-32128Apr 15, 2024RealtynaEPSS 1.72%

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.