epsiloncool vulnerabilities and threats

12 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-84821Epsiloncool WP Fast Total Search · Missing Authorization High7.5EPSS 0.4%2026-09-10CVE Database V5CVE-2026-84821 Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions. EPSS 0.4%Vulnerability CWE-862	CVE Database V5	2026-09-10
High	7.5	EPSS 1.6%	CVE-2026-12741WP Fast Total Search – The Power of Indexed Search · SQL Injection High7.5EPSS 1.6%2026-07-28CVE Database V5CVE-2026-12741 The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form_data[s]' parameter in all versions up to, and including, 1.80.280 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. EPSS 1.6%Vulnerability epsiloncool CWE-89	CVE Database V5	2026-07-28
Medium	5.3	EPSS 0.3%	CVE-2026-27418Epsiloncool WP Fast Total Search · Missing Authorization Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-27418 Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. EPSS 0.3%Vulnerability CWE-862	CVE Database V5	2026-07-23
Critical	9.3	EPSS 0.4%	CVE-2026-57683Epsiloncool WP Fast Total Search · SQL Injection Critical9.3EPSS 0.4%2026-07-02CVE Database V5CVE-2026-57683 Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions. EPSS 0.4%Vulnerability CWE-89	CVE Database V5	2026-07-02
Medium	4.3	EPSS 0.1%	CVE-2025-57893Epsiloncool WP Fast Total Search · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-08-22CVE Database V5CVE-2025-57893 Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through <= 1.79.270. EPSS 0.1%Vulnerability	CVE Database V5	2025-08-22
Medium	4.3	EPSS 0.3%	CVE-2025-30894Epsiloncool WP Fast Total Search · Missing Authorization Medium4.3EPSS 0.3%2025-03-27CVE Database V5CVE-2025-30894 Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through <= 1.79.262. EPSS 0.3%Vulnerability	CVE Database V5	2025-03-27
Medium	6.5	EPSS 0.3%	CVE-2025-24572Epsiloncool WP Fast Total Search · Cross-Site Request Forgery (CSRF) Medium6.5EPSS 0.3%2025-01-24CVE Database V5CVE-2025-24572 Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through <= 1.78.258. EPSS 0.3%Vulnerability	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.5%	CVE-2025-24571Epsiloncool WP Fast Total Search · Missing Authorization Medium5.4EPSS 0.5%2025-01-24CVE Database V5CVE-2025-24571 Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through <= 1.78.258. EPSS 0.5%Vulnerability	CVE Database V5	2025-01-24
Medium	4.3	EPSS 0.2%	CVE-2024-38778Epsiloncool WP Fast Total Search · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-38778 Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.69.234. EPSS 0.2%Vulnerability	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.4%	CVE-2024-38714Epsiloncool WP Fast Total Search · Missing Authorization Medium4.3EPSS 0.4%2024-11-01CVE Database V5CVE-2024-38714 Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232. EPSS 0.4%Vulnerability	CVE Database V5	2024-11-01
High	7.1	EPSS 0.3%	CVE-2024-39663Epsiloncool WP Fast Total Search · Cross-site Scripting High7.1EPSS 0.3%2024-08-01CVE Database V5CVE-2024-39663 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232. EPSS 0.3%Vulnerability	CVE Database V5	2024-08-01
Medium	6.5	EPSS 0.4%	CVE-2024-29799Epsiloncool WP Fast Total Search · Cross-site Scripting Medium6.5EPSS 0.4%2024-03-27CVE Database V5CVE-2024-29799 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epsiloncool WP Fast Total Search allows Stored XSS.This issue affects WP Fast Total Search: from n/a through 1.59.211. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2024-03-27

Page 1 of 1