CVE-2026-95809 | optiuser Opti-Behavior Plugin up to 1.9.2.1 on WordPress Heatmap Recording Endpoint country_name cross site scripting

October 16, 2026 Yanac

A vulnerability identified as problematic has been detected in optiuser Opti-Behavior Plugin up to 1.9.2.1 on WordPress. This affects an unknown function of the component Heatmap Recording Endpoint. Performing a manipulation of the argument country_name results in cross site scripting.

This vulnerability was named CVE-2026-95809. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More