Optima Express IDX vulnerabilities
1 known vulnerability in Optima Express IDX from iHomefinder. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest first
- 7.3 High severity
Optima Express IDX: Improper Privilege Management
The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5. This is due to the `provisionBlogCredentials()` function in `iHomefinderAdmin.php` being reachable via the `wp_ajax_nopriv_ihf_clear_