CVE-2024-32128: fallo crítico en Realtyna Organic IDX plugin
WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability
Publicada el · Actualizada el
43Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 9.3epss 1.7%
probabilidad de explotación
1.7%top 23% de las CVE
explotación observada
noninguna fuente lo reporta
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Productos afectados
Realtyna · Realtyna Organic IDX pluginCVEs relacionadas — Realtyna Organic IDX plugin
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-57811CRITICALWordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerabilityEPSS 0.6%CVE-2024-38736CRITICALWordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-45439CRITICALWordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-33924HIGHWordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-78261HIGHWordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54052HIGHWordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion VulnerabilityEPSS 0.2%