Skip to content
Threat Feed
Subscribe

Product

WP Fast Total Search – The Power of Indexed Search (<= 1.80.280)

1 brief RSS
high advisory

CVE-2026-12741: Unauthenticated SQL Injection in WP Fast Total Search WordPress Plugin

An SQL injection vulnerability (CVE-2026-12741) exists in the WP Fast Total Search - The Power of Indexed Search plugin for WordPress, affecting all versions up to and including 1.80.280. The flaw, located in the 'form_data[s]' parameter, is due to insufficient input escaping and poor SQL query preparation, allowing unauthenticated attackers to inject malicious SQL queries and extract sensitive information from the underlying database.

WP Fast Total Search – The Power of Indexed Search wordpress plugin sql-injection web-vulnerability data-exfiltration
1r 2t 1c