CVE-2026-57811: Improper Control of Generation of Code ('Code Injection') in Realtyna ...

Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.

The Realtyna Organic IDX plugin suffers from an improper control of code generation vulnerability classified as code injection, enabling remote code inclusion. This flaw affects all versions up to and including 5.2.0. The vulnerability has a CVSS 3.1 base score of 10.0, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and complete confidentiality, integrity, and availability impact. No vendor advisory or patch information is available at this time, and no known exploits in the wild have been reported.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code on the affected system, potentially leading to full system compromise including complete loss of confidentiality, integrity, and availability of the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the Realtyna Organic IDX plugin if feasible, or applying any available temporary mitigations recommended by the vendor once published.

Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.

Machine-generated threat intelligence

The Realtyna Organic IDX plugin suffers from an improper control of code generation vulnerability classified as code injection, enabling remote code inclusion. This flaw affects all versions up to and including 5.2.0. The vulnerability has a CVSS 3.1 base score of 10.0, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and complete confidentiality, integrity, and availability impact. No vendor advisory or patch information is available at this time, and no known exploits in the wild have been reported.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code on the affected system, potentially leading to full system compromise including complete loss of confidentiality, integrity, and availability of the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the Realtyna Organic IDX plugin if feasible, or applying any available temporary mitigations recommended by the vendor once published.

Threat ID: 6a54b7f468715ace439f7edf

Added to database: 07/13/2026, 10:03:32 UTC

Last enriched: 07/13/2026, 10:20:01 UTC

Last updated: 07/14/2026, 10:52:08 UTC

Crowdsource mitigation strategies, intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Instant breach scanning across billions of leaked records. Free tier available.