CVE-2026-27418
MediumCVSS 5.3Summary
The WP Fast Total Search plugin for WordPress versions 1.81.282 and earlier contains a broken access control vulnerability exploitable by an unauthenticated attacker.
Risk Assessment
An unauthenticated person can gain unauthorized access to functions or data, potentially leading to privilege escalation or information disclosure.
Recommendation
Update the WP Fast Total Search plugin to the latest available version.
Other vulnerabilities in WP Fast Total Search
See all- CVE-2026-84821High
The WP Fast Total Search WordPress plugin in versions up to 1.82.284 contains a Broken Access Control vulnerability. An unauthenticated attacker can bypass access control mechanisms.
- CVE-2026-57683Critical
The WP Fast Total Search plugin version 1.80.280 and earlier contains an unauthenticated SQL injection vulnerability. An attacker without authentication can send crafted queries to the database.
Original NVD description (English source)
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.