ihomefinder

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ihomefinder records in CISA KEV

No ihomefinder vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2026-81976 CVE-2026-116393 · GHSA-3r77-5vf8-j558

LOW 39

Missing Authorization vulnerability in iHomefinder, Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00317 Published 2026-10-28 No fix listed CWE-862

TI-2026-63205 CVE-2026-93901 · GHSA-6j3j-m6gr-8hmg

LOW 38

The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00346 Published 2026-09-25 No fix listed CWE-269

TI-2023-14563 CVE-2023-30749 · GHSA-m38q-w7x3-mg4c

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin <= 7.3.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-14 No fix listed CWE-79