This vulnerability is a CSRF issue in the WP Fast Total Search plugin by Epsiloncool, affecting versions up to 1.69.234. It enables attackers to trick authenticated users into submitting unwanted requests that could alter plugin behavior or settings. The vulnerability does not directly impact confidentiality or availability but has a limited integrity impact. No patch or vendor advisory is currently available, and no exploits have been observed in the wild.

The impact is limited to potential unauthorized actions performed by authenticated users without their intent, affecting data integrity within the plugin's context. There is no direct confidentiality or availability impact reported. The medium severity rating reflects the moderate risk posed by this CSRF vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting the use of the affected plugin, or implement CSRF protections at the application or server level if possible. Monitor official sources for updates regarding patches or mitigations.