Epsiloncool Vulnerabilities and Affected Products
Vulnerabilities associated with WP Fast Total Search.
Products
Clear product- WP Fast Total Search10 vulnerabilities
- WP Fast Total Search – The Power of Indexed Search1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-27418MEDIUM | WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerabilityUnauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. CWE-862Jul 23, 2026 | CVSS5.3v3.1 | EPSS0.214% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-57683CRITICAL | WordPress WP Fast Total Search plugin <= 1.80.280 - SQL Injection vulnerabilityUnauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions. CWE-89Jul 2, 2026 | CVSS9.3v3.1 | EPSS0.24% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-57893MEDIUM | WordPress WP Fast Total Search Plugin <= 1.79.270 - Cross Site Request Forgery (CSRF) VulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through <= 1.79.270. CWE-352Aug 22, 2025 | CVSS4.3v3.1 | EPSS0.14% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-30894MEDIUM | WordPress WP Fast Total Search plugin <= 1.79.262 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through <= 1.79.262. CWE-862Mar 27, 2025 | CVSS4.3v3.1 | EPSS0.306% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-24572MEDIUM | WordPress WP Fast Total Search plugin <= 1.78.258 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through <= 1.78.258. CWE-352Jan 24, 2025 | CVSS6.5v3.1 | EPSS0.257% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-24571MEDIUM | WordPress WP Fast Total Search plugin <= 1.78.258 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through <= 1.78.258. CWE-862Jan 24, 2025 | CVSS5.4v3.1 | EPSS0.446% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38778MEDIUM | WordPress WP Fast Total Search <= 1.69.234 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.69.234. CWE-352Jan 2, 2025 | CVSS4.3v3.1 | EPSS0.168% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-38714MEDIUM | WordPress WP Fast Total Search <= 1.68.232 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232. CWE-862Nov 1, 2024 | CVSS4.3v3.1 | EPSS0.372% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-39663HIGH | WordPress WP Fast Total Search plugin <= 1.68.232 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232. CWE-79Aug 1, 2024 | CVSS7.1v3.1 | EPSS0.271% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-29799MEDIUM | WordPress WP Fast Total Search plugin <= 1.59.211 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epsiloncool WP Fast Total Search allows Stored XSS.This issue affects WP Fast Total Search: from n/a through 1.59.211. CWE-79Mar 27, 2024 | CVSS6.5v3.1 | EPSS0.351% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |