37 matches found
PT-2025-5413 · WordPress · Epsiloncool Wp Fast Total Search
Name of the Vulnerable Software and Affected Versions: Epsiloncool WP Fast Total Search versions 1.78.258 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by...
CVE-2024-38778
Cross-Site Request Forgery CSRF vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.69.234...
PT-2025-2529 · WordPress · Epsiloncool Wp Fast Total Search
Name of the Vulnerable Software and Affected Versions: Epsiloncool WP Fast Total Search versions 1.69.234 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...
CVE-2024-38714
Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...
CVE-2024-38714
CVE-2024-38714 concerns WP Fast Total Search (Epsiloncool) with Missing Authorization due to incorrectly configured access control levels. Affected versions are WP Fast Total Search 1.68.232 and earlier. Public details in connected sources indicate the attack surface involves unauthorized access ...
CVE-2024-38714 WordPress WP Fast Total Search <= 1.68.232 - Broken Access Control vulnerability
Missing Authorization vulnerability in Epsiloncool WP Fast Total Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through 1.68.232...
PT-2024-28159 · WordPress · Epsiloncool Wp Fast Total Search
Name of the Vulnerable Software and Affected Versions: Epsiloncool WP Fast Total Search versions 1.68.232 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...
CVE-2024-39663
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...
CVE-2024-39663 WordPress WP Fast Total Search plugin <= 1.68.232 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...
CVE-2024-39663
CVE-2024-39663 is a cross-site scripting vulnerability in the WordPress plugin “WP Fast Total Search” (Epsiloncool) that allows stored XSS due to improper neutralization during web page generation. Public records indicate the issue affects versions up to 1.68.232; Patchstack lists a fixed release...
CVE-2024-39663 WordPress WP Fast Total Search plugin <= 1.68.232 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through = 1.68.232...
WordPress WP Fast Total Search Plugin <= 1.68.232 is vulnerable to Cross Site Scripting (XSS)
Software WP Fast Total Search Type Plugin Vulnerable versions = 1.68.232 Fixed in 1.69.234 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39663 Patch priority Medium CVSS severity Medium 7.1 Developer Epsiloncool PSID e7e1ae669a97 Credits justakazh Required...
WordPress WP Fast Total Search Plugin <= 1.69.234 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Fast Total Search Type Plugin Vulnerable versions = 1.69.234 Fixed in 1.70.236 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-38778 Patch priority Low CVSS severity Low 4.3 Developer Epsiloncool PSID 7430c079e28f Credits Majed Refaea...
WordPress WP Fast Total Search Plugin <= 1.68.232 is vulnerable to Broken Access Control
Software WP Fast Total Search Type Plugin Vulnerable versions = 1.68.232 Fixed in 1.69.234 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38714 Patch priority Low CVSS severity Low 4.3 Developer Epsiloncool PSID 00f4bc37a87e Credits Majed Refaea Required...
CVE-2024-29799
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search allows Stored XSS.This issue affects WP Fast Total Search: from n/a through 1.59.211...
CVE-2024-29799 WordPress WP Fast Total Search plugin <= 1.59.211 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Epsiloncool WP Fast Total Search allows Stored XSS.This issue affects WP Fast Total Search: from n/a through 1.59.211...