Realtyna Organic IDX plugin

Realtyna Organic IDX plugin + WPL Real Estate before 5.4.2, some request parameters are reflected into page output without adequate sanitization or escaping. An unauthenticated attacker can craft a link that executes JavaScript in the site's origin when a victim follows it. The export does not identify the affected parameters, route, handler or precise output contexts; exploitation requires victim interaction.

Realtyna Organic IDX plugin is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 5.4.1.

Realtyna Organic IDX plugin + WPL Real Estate through 5.3.0 combines three authorization and validation failures: saveLiveImages() does not validate file extensions or content, the get_keys() AJAX handler does not adequately restrict callers, and the REST API import endpoint lacks authentication. A Subscriber-or-higher attacker can obtain the required keys, submit attacker-controlled image data through the import path, and have saveLiveImages() write an arbitrary file to the server. If the uploaded file is executable by the web server, this enables remote code execution. The published.

Realtyna Organic IDX plugin + WPL Real Estate through 5.2.0 registers its I/O service on WordPress's public init hook without a WordPress capability check. The service accepts api_key and api_secret values seeded as identical static defaults by the plugin's own migration, so an unauthenticated attacker who knows those defaults can reach the upload operation. Attacker-supplied file data then reaches the plugin's upload function without file-type validation, allowing an executable file to be written to the server and enabling remote code execution. The published.

Realtyna Organic IDX plugin is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 5.2.0.

Realtyna Organic IDX plugin is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 5.1.0.

Realtyna Organic IDX plugin is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

Realtyna Organic IDX plugin is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

Realtyna Organic IDX plugin is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

Realtyna Organic IDX plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.