Cpe:2.3:a:opti-Behavior:opti-Behavior:*:*:*:*:*:wordpress:*:*

An unauthenticated stored DOM-based XSS vulnerability (CVE-2026-95686) in the Opti-Behavior plugin for WordPress allows attackers to inject malicious scripts via a publicly accessible nonce-protected ingest endpoint.