realtyna_organic_idx_plugin_+_wpl_real_estate vulnerabilities

CVEs whose affected-version data names the realtyna_organic_idx_plugin_+_wpl_real_estate package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-91014High· 7.1

1w ago

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts …

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2 does not sanitise and escape some of its parameters before reflecting them back in the page, allowing unauthenticated attackers to run arbitrary web scripts …

▾ TwilightEPSS 0.28%via NVD