CVE Intelligence

Epsiloncool vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Epsiloncool products: 4 record(s), with severity, exploitation and fixes.

WP Fast Total Search 3WP Fast Total Search – The Power of Indexed Search 1

Exploited only (KEV) →

CVE-2026-84821 High · 7.5 CWE-862 Sep 10, 2026
WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.
CVE-2026-12741 High · 7.5 CWE-89 Jul 28, 2026
WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection
The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form_data[s]' parameter in all versions up to, and including, 1.80.280 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVE-2026-27418 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.
CVE-2026-57683 Critical · 9.3 CWE-89 Jul 2, 2026
WordPress WP Fast Total Search plugin <= 1.80.280 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions.