CVE-2026-78261

WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.

We have discovered 23 live websites that are affected by CVE-2026-78261.

Run a Free Instant Scan



Affected Software

Product  Real Estate Listing Realtyna Wpl
Category Wordpress Plugins
Vulnerable Domains23 live websites (47% of Real Estate Listing Realtyna Wpl install base)
Vulnerable Versions
  • from 0 through 5.4.1
Vulnerable Versions Count2 versions ( 29% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Aug 27, 2026
  • Updated - Aug 27, 2026

Credits

  • Aydan Arabadzha | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-78261
United States14 websites


Germany3 websites
Brazil2 websites
Canada2 websites
Chile1 websites
Portugal1 websites

Website Distribution by TLD

Number of websites using CVE-2026-78261
.com15 websites
.com.br2 websites
.de1 websites
.net1 websites
.org1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-78261

Top websites that are affected by CVE-2026-78261. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***************.com Canada**,***,***
******************.com United States**,***,***
************.com United States**,***,***
************.com United States**,***,***
***************.cl Chile**,***,***
***************.com United States**,***,***
********************************.com United States**,***,***
***************.com United States**,***,***
**********.com United States**,***,***
************.com Portugal**,***,***
See full domain list

FAQ

CVE-2026-78261 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Real Estate Listing Realtyna Wpl
A total of 23 websites have been identified as vulnerable to CVE-2026-78261, based on global website indexing conducted by WebTechSurvey.
The Real Estate Listing Realtyna Wpl is affected by the CVE-2026-78261 vulnerability.
Real Estate Listing Realtyna Wpl versions up to and including 5.4.1 are vulnerable to CVE-2026-78261.