Skip to content
Threat Feed
Subscribe

Product

Optima Express IDX (<= 8.7.5)

1 brief RSS
high advisory

Privilege Escalation in Optima Express IDX WordPress Plugin

An unauthenticated privilege escalation vulnerability (CVE-2026-93901) in the Optima Express IDX plugin allows attackers to elevate a pre-registered 'optima-express' user account to the Author role.

Optima Express IDX wordpress privilege-escalation web-application
1r 1t 1c