Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:ihomefinder:optima_express_idx:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Privilege Escalation in Optima Express IDX WordPress Plugin

An unauthenticated privilege escalation vulnerability (CVE-2026-93901) in the Optima Express IDX plugin allows attackers to elevate a pre-registered 'optima-express' user account to the Author role.

Optima Express IDX wordpress privilege-escalation web-application
1r 1t 1c