CVE Explorer

CVE-2026-13714

The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uploaded files, and its file upload functionality is gated only by an API that is enabled by default and authenticated with hardcoded credentials shipped identically across all installations. This makes it possible for unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c1a1a02e8566ab01eb0b5dde113f700c4cb9424eec5bb3b12fa7f0c09e0e9741

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-434","description":"CWE-434 Unrestricted Upload of File with Dangerous Type","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9b0c3627645c72feb918eb0ee015be5eaa2749208102e379883ac49edb8a9dab · sha256:5df26409c25ed780… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"CWE-434 Unrestricted Upload of File with Dangerous Type","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9b0c3627645c72feb918eb0ee015be5eaa2749208102e379883ac49edb8a9dab · sha256:5df26409c25ed780… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"Realtyna Organic IDX plugin + WPL Real Estate","vendor":"Unknown","versions":[{"lessThan":"5.3.0","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:9b0c3627645c72feb918eb0ee015be5eaa2749208102e379883ac49edb8a9dab · sha256:5df26409c25ed780… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:9b0c3627645c72feb918eb0ee015be5eaa2749208102e379883ac49edb8a9dab · sha256:5df26409c25ed780… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-434","description":"CWE-434 Unrestricted Upload of File with Dangerous Type","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9b0c3627645c72feb918eb0ee015be5eaa2749208102e379883ac49edb8a9dab · sha256:5df26409c25ed780… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"CWE-434 Unrestricted Upload of File with Dangerous Type","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9b0c3627645c72feb918eb0ee015be5eaa2749208102e379883ac49edb8a9dab · sha256:5df26409c25ed780… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/69f9dcd8-ab3c-46ed-ac6b-2f1db35f8d1f/"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:9b0c3627645c72feb918eb0ee015be5eaa2749208102e379883ac49edb8a9dab · sha256:5df26409c25ed780… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer