p PatchFirst

CVE-2026-116393

CVE-2026-116393 · WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0.

CVSS 7.5 · High · EPSS 0.3%

Published
Updated

Affected products and versions

  • optima express

    Versions
    • ≥ 0, ≤ 9.0.0: Affected (custom)

    No fix published

Original sources

Check your server →