What is CVE-2026-14483?
This vulnerability affects the Realtyna Organic IDX and WPL Real Estate plugins for WordPress, allowing an unauthenticated attacker to perform arbitrary file uploads. It is caused by missing file type validation in the upload function. Users should immediately update to the latest version or temporarily disable the plugin.
Azərbaycanca: Bu boşluq WordPress üçün Realtyna Organic IDX və WPL Real Estate plaginlərinə təsir edir, autentifikasiya olunmamış hücumçuya ixtiyari fayl yükləməyə imkan verir. Əsas səbəb yükləmə funksiyasında fayl tipi yoxlamasının olmamasıdır. İstifadəçilər dərhal plaqini son versiyaya yeniləməli və ya müvəqqəti olaraq deaktiv etməlidir.
Related CVEs
link basis: same weakness class CWE-434; shared vendor: Realtyna
FAQ2
Which WordPress plugins are affected by CVE-2026-14483?
This vulnerability affects the Realtyna Organic IDX and WPL Real Estate plugins.
What is the root cause of CVE-2026-14483?
The root cause is missing file type validation in the upload function.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.