CVE-2026-57811: falha crítica em Realtyna Organic IDX plugin
WordPress Realtyna Organic IDX plugin plugin <= 5.2.0 - Remote Code Execution (RCE) vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
48Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 10epss 0.6%
da publicação à arma16 dias
Publicada no NVD13 de jul.
1ª PoC+16d
Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Realtyna · Realtyna Organic IDX pluginPoCs públicas encontradas — 2
githubgithub.com/0xCyp1337/CVE-2026-57811★ 2githubgithub.com/webshellseo8/CVE-2026-57811-Proof-of-Concept★ 0⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Realtyna Organic IDX plugin
No mesmo produto, das mais perigosas para as menos.
CVE-2024-32128CRITICALWordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerabilityEPSS 1.7%CVE-2024-38736CRITICALWordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-33924HIGHWordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-45439CRITICALWordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-78261HIGHWordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54052HIGHWordPress Realtyna Organic IDX plugin <= 5.0.0 - Local File Inclusion VulnerabilityEPSS 0.2%