Skip to content
Threat Feed
Subscribe

Vendor

Opti-Behavior

1 brief RSS
high advisory

Stored DOM-Based Cross-Site Scripting in Opti-Behavior Plugin for WordPress

An unauthenticated stored DOM-based XSS vulnerability (CVE-2026-95686) in the Opti-Behavior plugin for WordPress allows attackers to inject malicious scripts via a publicly accessible nonce-protected ingest endpoint.

Opti-Behavior
2t 1c