CyberSecBulletin

iHomefinder vulnerabilities

We track 2 vulnerabilities in iHomefinder products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest iHomefinder vulnerabilities

  • 7.5 High severity

    Optima Express: Missing Authorization

    CVE-2026-116393iHomefinder

    Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0.

  • 7.3 High severity

    Optima Express IDX: Improper Privilege Management

    CVE-2026-93901iHomefinder

    The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5. This is due to the `provisionBlogCredentials()` function in `iHomefinderAdmin.php` being reachable via the `wp_ajax_nopriv_ihf_clear_