Plugin icon

Realtyna Organic IDX plugin + WPL Real Estate

real-estate-listing-realtyna-wpl

Vulnerabilities:

10

Last Updated:

August 20, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-09-15
Title
Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint
Fixed in
Fixed in 5.4.2
CVSS
7.1 (high)
Published
2026-08-25
Title
Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.4.2
CVSS
7.2 (high)
Published
2026-07-30
Title
Realtyna Organic IDX plugin + WPL Real Estate < 5.4.0 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 5.4.0
CVSS
8.8 (high)
Published
2026-07-09
Title
Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Remote Code Execution
Fixed in
Fixed in 5.3.0
CVSS
9.8 (critical)
Published
2026-07-06
Title
Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Fixed in
Fixed in 5.3.0
CVSS
9.8 (critical)
Published
2026-05-26
Title
Realtyna Organic IDX plugin + WPL Real Estate < 5.2.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 5.2.0
CVSS
7.5 (high)
Published
2025-07-30
Title
Realtyna Organic IDX plugin < 5.0.1 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 5.0.1
CVSS
8.1 (high)
Published
2024-07-11
Title
Realtyna Organic IDX plugin < 4.14.14 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 4.14.14
CVSS
4.7 (medium)
Published
2024-04-29
Title
Realtyna Organic IDX plugin < 4.14.8 - Reflected XSS
Fixed in
Fixed in 4.14.8
CVSS
7.1 (high)
Published
2024-04-12
Title
Realtyna Organic IDX plugin < 4.14.8 - Unauthenticated SQLi
Fixed in
Fixed in 4.14.8
CVSS
8.6 (high)