Skip to content
Threat Feed
Subscribe

Product

Opti-Behavior (<= 1.9.2.1)

1 brief RSS
high advisory

Stored DOM-Based Cross-Site Scripting in Opti-Behavior Plugin for WordPress

An unauthenticated stored DOM-based XSS vulnerability (CVE-2026-95686) in the Opti-Behavior plugin for WordPress allows attackers to inject malicious scripts via a publicly accessible nonce-protected ingest endpoint.

Opti-Behavior
2t 1c