High · 7.5 CVE-2026-116393 EUVD-2026-112072GHSA-3r77-5vf8-j558

WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

Published Oct 28, 2026 · Updated Oct 28, 2026 · Assigned by Patchstack

Vendor: ihomefinder Product: Optima Express

Description

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0.

Affected products

Vendor	Product	Affected	Fixed
iHomefinder	Optima Express	≤ 9.0.0	—

References

https://patchstack.com/database/wordpress/plugin/optima-express/vulnerability/wordpress-optima-express-marketboost-idx-plugin-plugin-8-7-8-broken-access-control-vulnerability?_s_id=cve vdb-entry