CVE-2026-16236

The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages() function combined with an insufficient authorization check on the get_keys() AJAX handler and a missing authentication check on the REST API import endpoint. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

• CWE-434

• https://plugins.trac.wordpress.org/browser/real-estate-listing-realtyna-wpl/tags/5.3.0/api/init.php#L8
• https://plugins.trac.wordpress.org/browser/real-estate-listing-realtyna-wpl/tags/5.3.0/libraries/idx/addon_idxn.php#L562
• https://plugins.trac.wordpress.org/browser/real-estate-listing-realtyna-wpl/tags/5.3.0/libraries/idx/idx_property_mapper.php#L392
• https://plugins.trac.wordpress.org/browser/real-estate-listing-realtyna-wpl/tags/5.3.0/views/backend/addon_idx/wpl_ajax.php#L238
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4a64f840-8570-4f98-8b72-27bee1607fc2?source=cve

Published

Jul 31, 2026

Last Modified

Jul 31, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-16228A vulnerability was detected in SourceCodester Class and Exa…7.3
• CVE-2026-16229A flaw has been found in itsourcecode Courier Management Sys…4.3
• CVE-2026-1623A weakness has been identified in Totolink A7000R 4.1cu.4154…6.3
• CVE-2026-16230The Formidable Digital Signatures plugin for WordPress is vu…9.8
• CVE-2026-16232An authentication bypass vulnerability in the Check Point Sm…9.8
• CVE-2026-16235Crypt::Password versions through 0.28 for Perl generate inse…9.8
• CVE-2026-1624A security vulnerability has been detected in D-Link DWR-M96…8.8
• CVE-2026-16242A flaw was found in the Konnectivity proxy-server configurat…9.4
• CVE-2026-16243In Eclipse OMR versions up to 0.11, the arraycmp SIMD implem…7.5
• CVE-2026-16244A security vulnerability has been detected in itsourcecode H…6.3
• CVE-2026-16246In BRAIN2 versions prior to 3.09, the application LogPathCon…7.3
• CVE-2026-16247In _connect.BRAIN versions prior to 5.06, the application Lo…7.3