WordPress plugin
Optima Express IDX security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium4
- Low0
All Optima Express IDX vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤9.0.1No patch available | CVE-2026-116393 | |
| Medium6.4 | 8.7.5 - Authenticated (Author+) Stored Cross-Site Scripting 8.6.0 – 8.7.5Update to 8.7.6 | CVE-2026-96899 | |
| Medium5.3 | 8.7.5 - Missing Authorization 8.5.0 – 8.7.5Update to 8.7.6 | CVE-2026-96897 | |
| High7.3 | Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment ≤8.7.5Update to 8.7.6 | CVE-2026-93901 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤7.3.0Update to 7.3.1 | CVE-2023-30749 |
- Medium5.3Missing Authorization
≤9.0.1No patch available
- Medium6.48.7.5 - Authenticated (Author+) Stored Cross-Site Scripting
8.6.0 – 8.7.5Update to 8.7.6
- Medium5.38.7.5 - Missing Authorization
8.5.0 – 8.7.5Update to 8.7.6
- High7.3Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment
≤8.7.5Update to 8.7.6
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤7.3.0Update to 7.3.1
Optima Express IDX: common questions
Does Optima Express IDX have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Optima Express IDX: 1 high, 4 medium. At least one is not fixed in the latest version.
How do I check which version of Optima Express IDX I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Optima Express IDX vulnerability?
CVE-2026-116393, published Oct 26, 2026: Optima Express IDX <= 9.0.1 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Optima Express IDX vulnerability listed in CISA KEV?
No. None of the known Optima Express IDX vulnerabilities is currently listed in the CISA KEV catalog.