Realtyna Organic IDX plugin + WPL Real Estate — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Realtyna Organic IDX plugin + WPL Real Estate, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-91014	Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpoint	-	-	2026-09-17
CVE-2026-16236	Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434	8.8	High	2026-07-31
CVE-2026-14483	Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command CWE-434	9.8	Critical	2026-07-31
CVE-2026-13714	Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution	-	-	2026-07-27

All 4 known CVE vulnerabilities affecting Realtyna Organic IDX plugin + WPL Real Estate with full Chinese analysis, references, and POCs where available.