Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Priority MEDIUM 42

The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form_data[s]' parameter in all versions up to, and including, 1.80.280 due to insufficient escap…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01588 Published 2026-07-28 No fix listed CWE-89
Priority LOW 20

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through <=…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00331 Published 2025-03-27 No fix listed CWE-862
Priority LOW 25

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through <=…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00475 Published 2025-01-24 No fix listed CWE-862
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-08-01 No fix listed CWE-79
Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epsiloncool WP Fast Total Search allows Stored XSS.This issue affects WP Fast Total Search: from n/a through 1.59.211.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00351 Published 2024-03-27 No fix listed CWE-79