CVE-2024-32128: falha crítica em Realtyna Organic IDX plugin
WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability
Publicada em · Atualizada em
43Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 9.3epss 1.7%
probabilidade de exploração
1.7%top 23% das CVEs
exploração observada
nãonenhuma fonte reporta
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
Realtyna · Realtyna Organic IDX pluginCVEs relacionadas — Realtyna Organic IDX plugin
No mesmo produto, das mais perigosas para as menos.
CVE-2026-57811CRITICALWordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerabilityEPSS 0.6%CVE-2024-38736CRITICALWordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-45439CRITICALWordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-33924HIGHWordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-78261HIGHWordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54052HIGHWordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion VulnerabilityEPSS 0.2%