Unauthenticated Access Control Issue in WP Fast Total Search by WordPress
CVE-2026-27418

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP Fast Total Search
Vendor
CVE Published:
23 July 2026

What is CVE-2026-27418?

The WP Fast Total Search plugin for WordPress has a vulnerability that allows unauthenticated users to exploit broken access control measures. This flaw can permit unauthorized individuals to gain access to restricted areas, leading to potential data breaches or unauthorized changes to site content. Users of versions up to 1.81.282 are urged to review their configurations and implement security best practices to mitigate risks associated with this vulnerability.

Affected Version(s)

WP Fast Total Search <= 1.81.282

References

https://patchstack.com/database/wordpress/plugin/fulltext...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Que Thanh Tuan | Patchstack Bug Bounty Program
.