Realtyna Organic IDX plugin + WPL Real Estate vulnerabilities

2 known vulnerabilities in Realtyna Organic IDX plugin + WPL Real Estate from Realtyna. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Realtyna Organic IDX plugin + WPL Real Estate: Unrestricted Upload of File with Dangerous Type

  CVE-2026-16236Jul 31, 2026RealtynaEPSS 1.2%

  The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages() function combined with an insufficient authorizat

• 9.8 Critical severity

  Realtyna Organic IDX plugin + WPL Real Estate: Unrestricted Upload of File with Dangerous Type

  CVE-2026-14483Jul 31, 2026RealtynaEPSS 3.97%

  The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function. This is due to missing file type validation in the upload function, combined with