Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Realtyna — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting Realtyna. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Realtyna develops real estate listing platforms with WordPress integration, primarily serving property management websites. Historically, the company's products have been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These weaknesses often stem from insufficient input validation and improper access controls in their listing management systems. Realtyna has addressed five publicly disclosed CVEs to date, with vulnerabilities affecting both their core plugins and add-on modules. While no major public security incidents have been documented, the recurring nature of these vulnerabilities suggests ongoing challenges in secure coding practices, particularly regarding user input handling and permission management within their real estate listing ecosystems.

CVE IDTitleCVSSSeverityPublished
CVE-2026-16236 Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload — Realtyna Organic IDX plugin + WPL Real EstateCWE-434 8.8 High2026-07-31
CVE-2026-14483 Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command — Realtyna Organic IDX plugin + WPL Real EstateCWE-434 9.8 Critical2026-07-31
CVE-2026-57811 WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability — Realtyna Organic IDX pluginCWE-94 10.0 Critical2026-07-13
CVE-2026-45439 WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability — Realtyna Organic IDX pluginCWE-89 9.3 Critical2026-06-15
CVE-2025-54052 WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion Vulnerability — Realtyna Organic IDX pluginCWE-352 7.5 High2025-08-20
CVE-2025-24656 WordPress Realtyna Provisioning Plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability — Realtyna ProvisioningCWE-79 7.1 High2025-02-03
CVE-2024-38736 WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability — Realtyna Organic IDX pluginCWE-434 9.1 Critical2024-07-12
CVE-2024-33924 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability — Realtyna Organic IDX pluginCWE-79 7.1 High2024-05-03
CVE-2024-32128 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability — Realtyna Organic IDX pluginCWE-89 9.3 Critical2024-04-15

This page lists every published CVE security advisory associated with Realtyna. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.