CVE-2024-38736: WordPress Realtyna Organic IDX plugin <=…

Record summary

CVE-2024-38736 has a selected CVSS score of 9.1 (critical).

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Injection.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.13.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 12, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Realtyna Organic IDX plugin Browse Realtyna / Realtyna Organic IDX pluginreal-estate-listing-realtyna-wpl Default status: unaffected	CVE List	Through 4.14.13	affected
realtyna_organic_idx Browse realtyna / realtyna_organic_idx Default status: unknown	CVE List	Through 4.14.13	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-38736

patchstack.comvdb entry

https://patchstack.com/database/vulnerability/real-estate-listing-realtyna-wpl/wordpress-realtyna-organic-idx-plugin-4-14-13-arbitrary-file-upload-vulnerability?_s_id=cve