Read the docs

optiuser

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

optiuser records in CISA KEV

No optiuser vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75204 CVE-2026-95809 · GHSA-gc4h-w8gx-jfq5

Stored DOM-based cross-site scripting in Opti-Behavior plugin

Priority LOW 31

The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter in all…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00247 Published 2026-10-16 No fix listed CWE-79
TI-2026-75203 CVE-2026-95686 · GHSA-x53h-w4xx-wqx7

Stored cross-site scripting in Opti-Behavior plugin for WordPress

Priority LOW 31

The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all version…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00278 Published 2026-10-16 No fix listed CWE-79
Open these records in search →