98 matches found
WP Fast Total Search <= 1.80.280 - Unauthenticated Time-Based Blind SQL Injection
WP Fast Total Search fulltext-search versions up to and including 1.80.280 contain an unauthenticated time-based blind SQL injection. The wpajaxnoprivwpftsautocomplete handler reads the formdatas parameter and feeds it into a WPQuery. The plugin's indexsqlwhere builds its cluster query with...
CVE-2026-84821
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84821
CVE-2026-84821 affects the WP Fast Total Search WordPress plugin in versions
CVE-2026-84821 WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84821 WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
EUVD-2026-75536
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84821: Missing Authorization
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
PT-2026-89450
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by William Honnér in WordPress Plugin WP Fast Total Search versions = 1.82.284...
WordPress WP Fast Total Search – The Power of Indexed Search plugin <= 1.80.280 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Nabil Irawan in WordPress Plugin WP Fast Total Search versions = 1.80.280...
EUVD-2026-49716
The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'formdatas' parameter in all versions up to, and including, 1.80.280 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2026-12741
CVE-2026-12741 affects the WordPress plugin WP Fast Total Search – The Power of Indexed Search, vulnerable via the form_data[s] parameter. All versions up to 1.80.280 fail to properly escape the user-provided input and do not sufficiently prepare the SQL query, enabling unauthenticated attackers ...
CVE-2026-12741: Improper Neutralization of Special Elements used in an SQL Command
The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'formdatas' parameter in all versions up to, and including, 1.80.280 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
PT-2026-65410
Name of the Vulnerable Software and Affected Versions WP Fast Total Search – The Power of Indexed Search versions prior to 1.80.281 Description An unauthenticated SQL Injection exists due to insufficient escaping of user-supplied input and lack of proper preparation of the SQL query. This allows...
CVE-2026-27418
Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...
CVE-2026-27418 WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...
EUVD-2026-48159
Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...
CVE-2026-27418 WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...