This vulnerability in WP Fast Total Search involves missing authorization checks, enabling users with low privileges to bypass intended access controls. It affects versions up to 1.79.262 of the plugin. The CVSS score of 4.3 reflects a network attack vector with low attack complexity and no user interaction required, resulting in limited integrity impact but no confidentiality or availability impact. No vendor patch or advisory has been provided yet, and no exploits are known in the wild.

The vulnerability allows unauthorized actions due to missing authorization controls, potentially leading to limited integrity issues within the affected plugin's functionality. There is no impact on confidentiality or availability reported. Since no known exploits exist in the wild, the immediate risk is moderate but could increase if exploitation techniques are developed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize exposure. Monitor for updates from Epsiloncool regarding patches or official mitigations.