321 matches found
CVE-2026-91014
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...
CVE-2026-91014
Realtyna Organic IDX plugin + WPL Real Estate (WordPress) before 5.4.2 is vulnerable to reflected XSS via the Location Selector Endpoint , where certain parameters are not sanitised or escaped before being reflected in the page output. An unauthenticated attacker can exploit this by crafting a ma...
CVE-2026-91014 Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...
EUVD-2026-81355
The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...
CVE-2026-14483_exploit
CVE-2026-14483 — Realtyna WPL / Organic IDX Unauthenticated Arbitrary File Upload → RCE Unauthenticated arbitrary file upload leading to RCE in the Realtyna WPL / Organic IDX WordPress plugin real-estate-listing-realtyna-wpl ≤ 5.2.0. The plugin registers an "I/O service" on the public WordPress...
CVE-2026-57811
CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 10.0 — Realtyna Organic IDX + WPL Real Estate ≤ 5.2.0 This tool exploits CVE-2026-57811 , a critical vulnerability in the Realtyna Organic IDX + WPL Real Estate...
CVE-2026-81787
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81788
Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...
EUVD-2026-75520
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81788
CVE-2026-81788 affects the WordPress IMPress for IDX Broker plugin in versions
CVE-2026-81788 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81787
CVE-2026-81787 affects the WordPress plugin IMPress for IDX Broker (versions ≤ 3.3.0 ). The vulnerability is an unauthenticated Broken Authentication flaw, meaning an attacker with network access and no prior credentials can exploit it. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:...
EUVD-2026-75521
Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81787 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HaiND in WordPress Plugin IMPress for IDX Broker versions = 3.3.0...
WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HaiND in WordPress Plugin IMPress for IDX Broker versions = 3.3.0...
CVE-2026-78261
Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...
CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...