CVE-2026-96899 | Optima Express IDX Plugin up to 8.7.5 on WordPress REST Endpoint cross site scripting

September 27, 2026 Yanac

A vulnerability marked as problematic has been reported in Optima Express IDX Plugin up to 8.7.5 on WordPress. Affected is an unknown function of the component REST Endpoint. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-96899. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More