WP Fast Total Search – The Power of Indexed Search

WP Fast Total Search – The Power of Indexed Search has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 11 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 3 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 4 of the records (36%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 11 issues recorded for WP Fast Total Search – The Power of Indexed Search has a vendor fix available, so running the current release closes all known holes.

8 independent researchers contributed these findings, most of them (2) reported by Kévin Mosbahi (Mika). WP Fast Total Search – The Power of Indexed Search is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage100%
Open

0

Fixed

11

Get automatic notifications for all WP Fast Total Search – The Power of Indexed Search vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-12741

WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

11 records
2026-07-27 19:42CVE-2026-12741
7.5
High
Nabil IrawanYes
2026-07-22 00:00CVE-2026-27418
5.3
Medium
Que Thanh TuanYes
2026-06-29 00:00CVE-2026-57683
7.5
High
Nguyen Dinh Hai (HaiND)Yes
2025-08-22 00:00CVE-2025-57893
4.3
Medium
Nabil IrawanYes
2025-03-27 00:00CVE-2025-30894
4.3
Medium
Trương Hữu Phúc (truonghuuphuc)Yes
2025-01-24 00:00CVE-2025-24571
4.3
Medium
Kévin Mosbahi (Mika)Yes
2025-01-24 00:00CVE-2025-24572
4.3
Medium
Kévin Mosbahi (Mika)Yes
2024-08-01 00:00CVE-2024-39663
7.2
High
akas wisnu ajiYes
2024-07-19 00:00CVE-2024-38778
4.3
Medium
Majed RefaeaYes
2024-07-11 00:00CVE-2024-38714
4.3
Medium
Majed RefaeaYes
Showing 1–10 of 11 reports
WP Fast Total Search – The Power of Indexed Search banner
Latestv1.83.286

WP Fast Total Search – The Power of Indexed Search

Epsiloncool

Author

Epsiloncool

4.4(28)
88/100
Last Updated
2026-09-02 (10d ago)
Active Installs
1,000+
Downloads
74,015
Requires WP
5.0+
Requires PHP
0+
Tested up to
WP 7.1
Created
2015-10-04 (11y ago)

🚀 Supercharge Your WordPress Search with WP Fast Total Search (WPFTS)! Tired of the standard WordPress search that doesn’t find what you need? Are your users struggling to find content hidden in meta fields, shortcodes, or even files? WP Fast Total Search (WPFTS) is the solution that revolutionizes search on your site, making it truly fast, accurate, and comprehensive. Why WPFTS is Exactly What You Need: ✨ Searches EVERYWHERE: Unlike standard search, WPFTS indexes and finds information not only in post titles and content, but also within: Meta fields (Custom Fields) Custom Post Types Text inside shortcodes Content of attached files (PDF, DOCX, etc. in the Pro version) Dynamically generated content ⚙️ Simplicity and Compatibility: No External Dependencies: Doesn’t require installing heavy external services (like Elasticsearch or Solr). Perfect for standard shared hosting! Enhances, Doesn’t Replace: WPFTS enhances the standard WordPress search (WP_Query), it doesn’t break it. All your plugins and themes using standard search will automatically work better with WPFTS. Works Out-of-the-Box: Just install and activate. 🎯 Flexibility and Control: Customizable Relevance: Control what matters most in search results! Assign “weights” for title, content, and each meta field using an improved TF-IDF algorithm. Live Search (AJAX): Let users see search results instantly as they type. Easily added via the widget or shortcode [wpfts_widget]. Phrase Search Support: Find exact matches. Flexible Sorting: Sort results by relevance, date, title, and many other parameters. Key Advantages of WPFTS: ✅ True Indexed Search: Fast and efficient. ✅ No External Libraries or Services Required: Everything works right inside your website. ✅ HTML Cleanup: Correctly indexes content by removing tags and comments (important for Gutenberg). ✅ Language Support: Ready translations (English, German, Dutch, Russian, Ukrainian) and easy to add your own. ✅ API and Documentation: Extend and customize the plugin to fit your needs. ✅ Compatibility: Works great with PHP 5.6 up to PHP 8.2+. ✅ Extensibility: Supports add-ons, with a large library available and the ability to create your own. 💎 Get Even More with WP Fast Total Search Pro! The Pro version unlocks powerful features: 📄 Search Inside File Content: Indexes text within PDF, DOC, DOCX, and other formats. 🔍 Filter Search by File Type (MIME-type). 💡 Smart Excerpts: Displays PDF content snippets directly in search results. ☁️ Optional External Service for text extraction from files (license included). 🤝 Priority Technical Support: Help with installation, configuration, and conflict resolution. 🔄 Regular Auto-Updates: Just like plugins from the WordPress repository. 🧩 Premium Add-on Bundle: Integrations with popular plugins (WordPress Download Manager, Filebase Pro, Delicious Downloads, etc.) to index their content and files. Ability to request custom add-on development. TEST DRIVE – TRY FOR FREE | GET PRO 💎 🌍 Translations We are grateful to the translators who made the plugin accessible worldwide: torkeller (@torkeller) for German and German_formal Peter Smits @psmits1567 for Dutch Lera Suhanova for Ukrainian epsiloncool @epsiloncool for Russian Join us in translating the plugin into your language! Let’s make it useful for everyone. 📚 Documentation Detailed information can be found in the Documentation. Security Policy Reporting Security Bugs Please report security bugs found in the WP Fast Total Search plugin’s source code through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C