CVE-2026-96897

5.3 Moyenne

Publiée le 27/09/2026 à 08:17 · Modifiée le 28/09/2026 à 17:17 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that is available to logged-out users, allowing unauthenticated attackers to force the creation of a fixed author-role account and to repeatedly rotate its application password on any connected install.

Traduire en français

Produits concernés

Unknown Optima Express IDX

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-862

Références

https://wpscan.com/vulnerability/f9fd04f4-282d-486f-8561-dbf02250282a/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories