CVE-2026-84821
HighCVSS 7.5Summary
The WP Fast Total Search WordPress plugin in versions up to 1.82.284 contains a Broken Access Control vulnerability. An unauthenticated attacker can bypass access control mechanisms.
Risk Assessment
An unauthenticated attacker may gain access to functions or data they should not access, potentially leading to unauthorized operations on the site.
Recommendation
Update the WP Fast Total Search plugin to a version newer than 1.82.284 or disable it if no update is available.
Other vulnerabilities in WP Fast Total Search
See all- CVE-2026-27418Medium
The WP Fast Total Search plugin for WordPress versions 1.81.282 and earlier contains a broken access control vulnerability exploitable by an unauthenticated attacker.
- CVE-2026-57683Critical
The WP Fast Total Search plugin version 1.80.280 and earlier contains an unauthenticated SQL injection vulnerability. An attacker without authentication can send crafted queries to the database.
Original NVD description (English source)
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.