WordPress plugin
WP Fast Total Search – The Power of Indexed Search security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium9
- Low0
All WP Fast Total Search – The Power of Indexed Search vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.82.284Update to 1.83.286 | CVE-2026-84821 | |
| High7.5 | Unauthenticated SQL Injection ≤1.80.280Update to 1.81.282 | CVE-2026-12741 | |
| Medium5.3 | Missing Authorization ≤1.81.282Update to 1.81.284 | CVE-2026-27418 | |
| High7.5 | Unauthenticated SQL Injection ≤1.80.280Update to 1.81.282 | CVE-2026-57683 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.79.270Update to 1.79.274 | CVE-2025-57893 | |
| Medium4.3 | Missing Authorization ≤1.79.262Update to 1.79.264 | CVE-2025-30894 | |
| Medium4.3 | Missing Authorization ≤1.78.258Update to 1.79.262 | CVE-2025-24571 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.78.258Update to 1.79.262 | CVE-2025-24572 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.68.232Update to 1.69.234 | CVE-2024-39663 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.69.234Update to 1.70.236 | CVE-2024-38778 | |
| Medium4.3 | Missing Authorization ≤1.68.232Update to 1.69.234 | CVE-2024-38714 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via WPFTS Live Search Widget ≤1.59.211Update to 1.60.213 | CVE-2024-29799 |
- Medium5.3Missing Authorization
≤1.82.284Update to 1.83.286
- High7.5Unauthenticated SQL Injection
≤1.80.280Update to 1.81.282
- Medium5.3Missing Authorization
≤1.81.282Update to 1.81.284
- High7.5Unauthenticated SQL Injection
≤1.80.280Update to 1.81.282
- Medium4.3Cross-Site Request Forgery
≤1.79.270Update to 1.79.274
- Medium4.3Missing Authorization
≤1.79.262Update to 1.79.264
- Medium4.3Missing Authorization
≤1.78.258Update to 1.79.262
- Medium4.3Cross-Site Request Forgery
≤1.78.258Update to 1.79.262
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.68.232Update to 1.69.234
- Medium4.3Cross-Site Request Forgery
≤1.69.234Update to 1.70.236
- Medium4.3Missing Authorization
≤1.68.232Update to 1.69.234
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via WPFTS Live Search Widget
≤1.59.211Update to 1.60.213
WP Fast Total Search – The Power of Indexed Search: common questions
Does WP Fast Total Search – The Power of Indexed Search have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in WP Fast Total Search – The Power of Indexed Search: 3 high, 9 medium. None are known to affect version null.
How do I check which version of WP Fast Total Search – The Power of Indexed Search I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Fast Total Search – The Power of Indexed Search vulnerability?
CVE-2026-84821, published Sep 9, 2026: WP Fast Total Search – The Power of Indexed Search <= 1.82.284 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any WP Fast Total Search – The Power of Indexed Search vulnerability listed in CISA KEV?
No. None of the known WP Fast Total Search – The Power of Indexed Search vulnerabilities is currently listed in the CISA KEV catalog.