WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…ugin-8-7-8-broken-access-control-vulnerability Diğer

Kayıt geçmişi

1. 28 Eki 2026 16:00Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-50541Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export
• 7,1 CVE-2026-52729Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion
• 8,5 CVE-2026-59185identrail: Cross-tenant GitHub installation binding without ownership verification
• 7,1 CVE-2026-59164NORA missing cross-user token-management authorization
• 6,5 CVE-2026-116404WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability
• 5,4 CVE-2026-116855WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability