WordPress Realtyna/WPL <5.3.0 Unauthenticated Arbitrary File Upload to RCE (CVE-2026-13714)

wpscan.com 2026-07-27查看中文 →

Security AdvisoryCVE-2026-13714CriticalRealtyna / WPL

Affected:

real-estate-listing-realtyna-wpl < 5.3.0

Fixed in:

5.3.0

Referenced CVEs: CVE-2026-13714

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Dokan < 5.0.14 Unauthenticated Sensitive Data Disclosure (CVE-2026-16575) 2026-08-21 AI Engine 2.8.0-3.6.0 Multisite Account Takeover via Privilege Escalation (CVE-2026-75796) 2026-08-21 WP Dokan-Lite < 5.0.14 Authorization Flaw Leading to Ledger Manipulation (CVE-2026-16577) 2026-08-21 Tamara Checkout Unauthenticated Order Status Manipulation (CVE-2026-16962) 2026-08-21 Media Library Assistant < 3.40 Author+ Authenticated SQL Injection (CVE-2026-16959) 2026-08-21

Offline Archive

Offline screenshot & PDF are Pro-exclusive