This vulnerability in WP Fast Total Search arises from missing authorization checks in the plugin's fulltext-search feature. It allows users with limited privileges to perform actions beyond their intended access level, potentially modifying data or causing denial of service. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impacts on integrity and availability. The affected versions include all versions up to and including 1.78.258. No patch or vendor advisory has been provided yet.

Exploitation of this vulnerability can lead to unauthorized modification of data and potential denial of service conditions within the affected WordPress plugin. There is no impact on confidentiality. The vulnerability requires an attacker to have some privileges on the system but no user interaction is needed. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative functions to trusted users only and monitor for unusual activity related to the search functionality. Avoid granting unnecessary privileges to users that could exploit this missing authorization.