CVE-2026-13714

The CVE-2026-13714 entry concerns Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin (before 5.3.0). The issue is a lack of validation of uploaded file types, with file uploads gated only by an API that is enabled by default and authenticated using hardcoded credentials shipped across...