FastX
FastX has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for FastX has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by Itthidej Aramsri (Boeing777). FastX is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 2 years, so new fixes are unlikely to arrive on their own.
CVE-2026-2518FastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and Activation
Read the full analysisVulnerability Records
FastX
Author
WPXPO
FastX allows you to build a fast-loading website effortlessly. You can create unique templates for all essential pages using the full site Editor. You can also choose from 10 theme styles of color and typography to create your brand identity. On top of that, FastX has integration with the #1 News plugin, PostX. With PostX starter sites you can build any kind of News Magazine site and Blog with three simple steps. Whether you are a blogger, marketer, or agency, FastX and PostX will help you to grow your business faster and better.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C