Code Injection Vulnerability in Realtyna Organic IDX Plugin
CVE-2024-38736

9.1CRITICAL

Key Information:

Vendor

WordPress
Status
Realtyna Organic Idx Plugin
Vendor
CVE Published:
12 July 2024

What is CVE-2024-38736?

The Realtyna Organic IDX plugin contains a vulnerability that allows for the unrestricted upload of dangerous file types, facilitating code injection attacks. This flaw poses significant security risks as attackers may exploit it to execute malicious scripts. It is crucial for users of the affected versions to take immediate action by updating to the latest version, ensuring the integrity and security of their WordPress installations.

Affected Version(s)

Realtyna Organic IDX plugin <= 4.14.13

References

https://patchstack.com/database/vulnerability/real-estate...
vdb-entry

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peng Zhou (Patchstack Alliance)
.