CVE-2026-14483_exploit

CVE-2026-14483 — Realtyna WPL / Organic IDX: неаутентифицированная произвольная загрузка файла → RCE Неаутентифицированная произвольная загрузка файла, приводящая к RCE, в Realtyna WPL / Organic IDX — плагине WordPress real-estate-listing-realtyna-wpl ≤ 5.2.0. Плагин регистрирует "I/O-сервис" в...

CVE-2026-57811

CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate ثغرة تنفيذ الأوامر عن بُعد غير مصادق عليها -red.svg ثغرة حرجة لتنفيذ الأوامر عن بُعد غير مصادق عليها CVSS 10.0 — Realtyna Organic IDX + WPL Real Estate ≤ 5.2.0 تستغل هذه الأداة CVE-2026-57811 ، وهي ثغرة حرجة في إضافة ووردبريس Realtyna Organi...

CVE-2026-91014

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...

EUVD-2026-81355

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...

CVE-2026-91014

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin versions prior to 5.4.2 are vulnerable to reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain parameters before they are reflected back in the page, specifically via the Loc...

CVE-2026-91014 Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...

CVE-2026-91014 Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...

CVE-2026-91014: Improper Neutralization of Input During Web Page Generation

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts in a visitor's browser if they can trick the visitor into...

PT-2026-94179

Name of the Vulnerable Software and Affected Versions Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin versions prior to 5.4.2 Description Insufficient sanitization and escaping of parameters in the Location Selector endpoint allow unauthenticated attackers to execute arbitrary web...

Exploit for CVE-2026-57811

CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate Unauth...

CVE-2026-78261

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

CVE-2026-78261

CVE-2026-78261 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the Realtyna Organic IDX WordPress plugin , affecting versions

CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

EUVD-2026-66994

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

CVE-2026-78261: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

PT-2026-82453

Name of the Vulnerable Software and Affected Versions Realtyna Organic IDX plugin versions prior to 5.4.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...

WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Aydan Arabadzha in WordPress Plugin Realtyna Organic IDX plugin versions = 5.4.1...

WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Son Van mrs0x06 in WordPress Plugin Realtyna Organic IDX plugin versions = 5.3.0...

WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 5.2.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Realtyna Organic IDX plugin versions = 5.2.0...