Read the docs

Realtyna

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Realtyna records in CISA KEV

No Realtyna vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

13 records

Priority MEDIUM 56

The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03971 Published 2026-07-31 No fix listed CWE-434
Priority MEDIUM 50

Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00564 Published 2026-07-13 No fix listed CWE-94
Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.0172 Published 2024-04-15 No fix listed CWE-89
Priority MEDIUM 44

Cross-site request forgery (CSRF) vulnerability in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03061 Published 2017-10-18 No fix listed CWE-352
Priority LOW 36

Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the (1) id, (2) copy_field in a data_copy action,…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02193 Published 2017-10-18 No fix listed CWE-89
Priority LOW 34

Cross-Site Request Forgery (CSRF) vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows PHP Local File Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <=…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00213 Published 2025-08-20 No fix listed CWE-352
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Provisioning realtyna-provisioning allows Reflected XSS.This issue affects Realtyna Provisioning: fr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00315 Published 2025-02-03 No fix listed CWE-79
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Organic IDX plugin allows Reflected XSS.This issue affects Realtyna Organic IDX plugin: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00334 Published 2024-05-03 No fix listed CWE-79
Open these records in search →