Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Realtyna — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting Realtyna. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Realtyna develops real estate listing platforms with WordPress integration, primarily serving property management websites. Historically, the company's products have been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These weaknesses often stem from insufficient input validation and improper access controls in their listing management systems. Realtyna has addressed five publicly disclosed CVEs to date, with vulnerabilities affecting both their core plugins and add-on modules. While no major public security incidents have been documented, the recurring nature of these vulnerabilities suggests ongoing challenges in secure coding practices, particularly regarding user input handling and permission management within their real estate listing ecosystems.

CVE ID Title CVSS Severity Published
CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability — Realtyna Organic IDX plugin CWE-79 7.1 High 2026-08-27
CVE-2026-16236 Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload — Realtyna Organic IDX plugin + WPL Real Estate CWE-434 8.8 High 2026-07-31
CVE-2026-14483 Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command — Realtyna Organic IDX plugin + WPL Real Estate CWE-434 9.8 Critical 2026-07-31
CVE-2026-57811 WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability — Realtyna Organic IDX plugin CWE-94 10.0 Critical 2026-07-13
CVE-2026-45439 WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability — Realtyna Organic IDX plugin CWE-89 9.3 Critical 2026-06-15
CVE-2025-54052 WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability — Realtyna Organic IDX plugin CWE-352 7.5 High 2025-08-20
CVE-2025-24656 WordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability — Realtyna Provisioning CWE-79 7.1 High 2025-02-03
CVE-2024-38736 WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability — Realtyna Organic IDX plugin CWE-434 9.1 Critical 2024-07-12
CVE-2024-33924 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability — Realtyna Organic IDX plugin CWE-79 7.1 High 2024-05-03
CVE-2024-32128 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability — Realtyna Organic IDX plugin CWE-89 9.3 Critical 2024-04-15

This page lists every published CVE security advisory associated with Realtyna. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.