optima-express vulnerabilities

CVEs whose affected-version data names the optima-express package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116393High· 7.5

1w ago

WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0.

▾ TwilightiHomefinder, Inc. · optima-expressEPSS 0.32%via CVEORG