Vulnerabilidades de Epsiloncool
CVEs publicadas que afetam produtos de Epsiloncool: 4 registro(s), com severidade, exploração e correções.
CVE-2026-84821
Alta · 7.5
CWE-862 10/09/2026
WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.
CVE-2026-12741
Alta · 7.5
CWE-89 28/07/2026
WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection
The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form_data[s]' parameter in all versions up to, and including, 1.80.280 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVE-2026-27418
Média · 5.3
CWE-862 23/07/2026
WordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.
CVE-2026-57683
Crítica · 9.3
CWE-89 02/07/2026
WordPress WP Fast Total Search plugin <= 1.80.280 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions.