WP Fast Total Search

WP Fast Total Search through 1.82.284 has an unauthenticated missing-authorization flaw. The CNA rates confidentiality impact as high: an attacker needs neither an account nor another user's interaction to reach the affected protected data.

WP Fast Total Search through 1.80.280 registers the wpfts_autocomplete AJAX action for logged-out visitors. wpfts_autocomplete_proc() copies attacker-controlled form_data[s] into a WP_Query, after which the plugin's SQL-building path incorporates search terms into queries without full parameterization. An unauthenticated attacker can alter those queries and extract sensitive database information. Version 1.81.282 replaces the vulnerable string construction with placeholders and $wpdb->prepare().

WP Fast Total Search is affected by broken access control. The vulnerable path is reachable without authentication. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The published affected range is n/a through 1.81.282.

WP Fast Total Search is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 1.80.280.

WP Fast Total Search is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

WP Fast Total Search is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

WP Fast Total Search is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

WP Fast Total Search is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

WP Fast Total Search is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

WP Fast Total Search is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

WP Fast Total Search is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

WP Fast Total Search is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.