Realtyna Organic IDX plugin + WPL Real Estate

Information

Software Type	Plugin
Software Slug	real-estate-listing-realtyna-wpl (view on wordpress.org)
Software Status	Active
Software Author	realtyna
Software Website	realtyna.com
Software Downloads	385,692
Software Active Installs	2,000
Software Record Last Updated	August 17, 2026

9 Vulnerabilities

Submit a Vulnerability

Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command

9.8

CVE-2026-14483

Jul 30, 2026

Researcher: Khaled Alenazi (Nxploited)

Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload

8.8

CVE-2026-16236

Jul 30, 2026

Researcher: Son Van (mrs0x06)

Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Remote Code Execution

9.8

CVE-2026-57811

Jul 9, 2026

Researcher: ParkHyunWoo

Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload

9.8

CVE-2026-13714

Jul 6, 2026

Researcher: Thom Stackhouse

Realtyna Organic IDX plugin + WPL Real Estate <= 5.1.0 - Unauthenticated SQL Injection

7.5

CVE-2026-45439

May 26, 2026

Researcher: ParkHyunWoo

Realtyna Organic IDX plugin <= 5.0.0 - Unauthenticated Local File Inclusion

8.1

CVE-2025-54052

Jul 30, 2025

Researcher: LVT-tholv2k

Realtyna Organic IDX plugin <= 4.14.13 - Authenticated (Admin+) Arbitrary File Upload

9.1

CVE-2024-38736

Jul 11, 2024

Researcher: Peng Zhou

Realtyna Organic IDX plugin <= 4.14.4 - Reflected Cross-Site Scripting

6.1

CVE-2024-33924

Apr 29, 2024

Researcher: Muhammad Daffa

Realtyna Organic IDX plugin <= 4.14.4 - Unauthenticated SQL Injection

10.0

CVE-2024-32128

Apr 12, 2024

Researcher: Joshua Chan

Title	Status	CVE ID	CVSS	Researchers	Date
Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command	Patched	CVE-2026-14483	9.8	Khaled Alenazi (Nxploited)	July 30, 2026
Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload	Patched	CVE-2026-16236	8.8	Son Van (mrs0x06)	July 30, 2026
Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Remote Code Execution	Patched	CVE-2026-57811	9.8	ParkHyunWoo	July 9, 2026
Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload	Patched	CVE-2026-13714	9.8	Thom Stackhouse	July 6, 2026
Realtyna Organic IDX plugin + WPL Real Estate <= 5.1.0 - Unauthenticated SQL Injection	Patched	CVE-2026-45439	7.5	ParkHyunWoo	May 26, 2026
Realtyna Organic IDX plugin <= 5.0.0 - Unauthenticated Local File Inclusion	Patched	CVE-2025-54052	8.1	LVT-tholv2k	July 30, 2025
Realtyna Organic IDX plugin <= 4.14.13 - Authenticated (Admin+) Arbitrary File Upload	Patched	CVE-2024-38736	9.1	Peng Zhou	July 11, 2024
Realtyna Organic IDX plugin <= 4.14.4 - Reflected Cross-Site Scripting	Patched	CVE-2024-33924	6.1	Muhammad Daffa	April 29, 2024
Realtyna Organic IDX plugin <= 4.14.4 - Unauthenticated SQL Injection	Patched	CVE-2024-32128	10.0	Joshua Chan	April 12, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation