Skip to content
PluginCanary

Optima Express IDX

by iHomefinder, Inc. · 10,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical3 Warnings

Avoid: vulnerability published 26 Oct 2026 with no patched version yet.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for Optima Express IDX
Ownership100
Maintenance100
Security15
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-1Vulnerability published 26 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 25 Sep 2026, fixed in 8.7.6. Update to version 8.7.6 or later.25 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 25 Sep 2026, fixed in 8.7.6. Update to version 8.7.6 or later.25 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 8.7.6. Update to version 8.7.6 or later.24 Sep 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
ihomefinder26 Aug 2011 to 30 Oct 2026, 415 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
26
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for Optima Express IDX
Q1 20242
Q2 20240
Q3 20241
Q4 20241
Q1 20250
Q2 20255
Q3 20251
Q4 20251
Q1 20264
Q2 20265
Q3 20267
Q4 20263

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
26 Oct 2026Optima Express IDX <= 9.0.1 - Missing Authorization5.3<= 9.0.1No fixn/a
25 Sep 2026Optima Express 8.6.0 - 8.7.5 - Authenticated (Author+) Stored Cross-Site Scripting6.48.6.0 to 8.7.58.7.60
25 Sep 2026Optima Express 8.5.0 - 8.7.5 - Missing Authorization5.38.5.0 to 8.7.58.7.60
24 Sep 2026Optima Express IDX <= 8.7.5 - Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment7.3<= 8.7.58.7.60
14 Apr 2023Optima Express + MarketBoost IDX Plugin <= 7.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 7.3.07.3.1118

Source: Wordfence Intelligence.

Reputation

Average rating fell from 5.0 to 4.0 between Q2 2024 and Q2 2025.

Rating distribution
5 star19
4 star6
3 star1
2 star5
1 star14
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Optima Express IDX
4 May 2026200
11 May 2026388
18 May 2026780
25 May 2026444
1 Jun 2026337
8 Jun 20262,961
15 Jun 2026694
22 Jun 2026517
29 Jun 2026516
6 Jul 2026814
13 Jul 2026444
20 Jul 2026516
27 Jul 2026474
3 Aug 2026432
10 Aug 2026427
17 Aug 2026382
24 Aug 20264,541
31 Aug 20264,486
7 Sep 20262,696
14 Sep 20268,418
21 Sep 20266,516
28 Sep 20261,007
5 Oct 20261,075
12 Oct 2026638
19 Oct 20263,505
26 Oct 20266,558
2 Nov 2026300

Weekly downloads over the last 4 weeks are 48% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Job BoardScore 92 · 10,000+HivePress MessagesScore 91 · 7,000+HivePress ReviewsScore 91 · 7,000+HivePress FavoritesScore 91 · 7,000+HivePress GeolocationScore 91 · 6,000+

Facts

Version9.0.1
AuthoriHomefinder, Inc.
Added26 Aug 2011
Last updated30 Oct 2026
Active installs10,000+
Requires WordPress5.2
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
TagsIDX plugin, real-estate, wordpress idx, MLS IDX Search, Real Estate Search

Questions

Is Optima Express IDX still maintained?

Optima Express IDX was last updated on 30 Oct 2026. Its Canary status is Avoid.

Is Optima Express IDX safe?

Optima Express IDX has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns Optima Express IDX?

The wordpress.org author is iHomefinder, Inc.. Recent committers: ihomefinder, plugin-master. We have recorded no ownership change.

What can I use instead of Optima Express IDX?

Plugins in the same category with a higher Canary Score: Simple Job Board, HivePress Messages, HivePress Reviews, HivePress Favorites, HivePress Geolocation.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue