Advisories · Technology
Realtyna Organic IDX plugin.
Every CVE that names Realtyna Organic IDX plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
WordPress Realtyna Organic IDX plugin plugin <= 5.4.2 - Arbitrary File Deletion vulnerability
- Realtyna Organic IDX plugin
- Path traversal
- CVSS 7.1 High
WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
- Realtyna Organic IDX plugin
- Cross-site scripting (XSS)
- CVSS 10.0 CriticalCritical · CVSS 9+
WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability
- Realtyna Organic IDX plugin
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability
- Realtyna Organic IDX plugin
- SQL injection
- CVSS 7.5 High
WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability
- Realtyna Organic IDX plugin
- Cross-site request forgery (CSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability
- Realtyna Organic IDX plugin
- Unrestricted file upload
- CVSS 7.1 High
WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability
- Realtyna Organic IDX plugin
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability
- Realtyna Organic IDX plugin
- SQL injection