Realtyna Organic IDX plugin + WPL Real Estate
Realtyna Organic IDX plugin + WPL Real Estate has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 10 are fixed as of September 2026. Their average CVSS score is 8.6, and the most serious one scores 10.0 out of 10. Severity breakdown: 5 critical and 4 high. 2026 was the busiest year with 6 disclosures.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 4 of the records (40%). Other recurring categories include Cross-Site Scripting, SQL Injection.
Every one of the 10 issues recorded for Realtyna Organic IDX plugin + WPL Real Estate has a vendor fix available, so running the current release closes all known holes.
9 independent researchers contributed these findings, most of them (2) reported by ParkHyunWoo. Realtyna Organic IDX plugin + WPL Real Estate is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-32128Realtyna Organic IDX plugin <= 4.14.4 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

Realtyna Organic IDX plugin + WPL Real Estate
Author
Realtyna
Your comprehensive solution for creating dynamic and feature-rich real estate websites on WordPress. Designed to cater to the diverse needs of real estate professionals, WPL offers unparalleled flexibility and scalability, empowering you to manage property listings, integrate MLS data, and enhance user engagement seamlessly. Key Features Flexible Property Listings: Effortlessly add, modify, and showcase property listings with customizable fields tailored to your specific requirements. Advanced Search Functionality: Provide users with intuitive search options, enabling them to filter properties based on various criteria for a personalized browsing experience. MLS Integration with MLS On The Fly™: Stay ahead with MLS On The Fly™, Realtyna’s latest technology that revolutionizes MLS integration. Starting April 1, 2025, WPL Basic is fully compatible with MLS On The Fly™, allowing you to display real-time MLS listings directly on your website without the need for extensive data storage. This integration offers lightning-fast performance, reduces hosting burdens, and ensures your listings are always up-to-date. Supported MLS Providers: https://realtyna.com/mls-providers MLS On The Fly: https://realtyna.com/mls-on-the-fly Docs: https://docs.realtyfeed.com Scalable Add-ons: Enhance your website’s functionality with a range of add-ons, including demographic packages, Listhub integration, and native mobile apps, ensuring your platform evolves alongside your business needs. Theme Compatibility: WPL seamlessly integrates with various themes, offering both native and compatible options to maintain your site’s aesthetic appeal while delivering robust functionality. Why Choose Realtyna WPL Real Estate? By integrating WPL with MLS On The Fly™, you position your website at the forefront of real estate technology. Experience reduced hosting costs, faster load times, and real-time data synchronization, providing your clients with an unparalleled property search experience. Elevate your real estate website with the Realtyna WPL Real Estate plugin and harness the power of MLS On The Fly™ for a streamlined, efficient, and cutting-edge property listing platform. How can I ask about custom developments? Feel free to contact us: https://support.realtyna.com/index.php?/Default/Tickets/Submit How can I report issues? Submit a support ticket on Realtyna ticketing system: https://support.realtyna.com/index.php?/Default/Tickets/Submit
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C