NVD HIGH: CVE-2026-12741 — The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is v...

Tuesday, July 28, 2026 at 08:17 AM UTC·Source: NIST NVD

Updated: Tuesday, July 28, 2026 at 09:00 AM UTC

Executive Summary

The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form_data[s]' parameter in all versions up to, and including, 1.80.280 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queri

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-12741

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Jul 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

PNC Financial Services appoints CISO

The PNC Financial Services Group, Inc. (NYSE: PNC) announced today that Christian Winward has been named chief information security officer.

7m agoFinextra

MEDIUMVulnerabilityNEW

NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names

NVIDIA has launched a new Open Secure AI Alliance to build an “open defense stack for agents”

48m agoInfosecurity Magazine

HIGHVulnerability

NVD HIGH: CVE-2026-14516 — The Online Scheduling and Appointment Booking System – Bookly plugin for WordPre...

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to time-based SQL Injection via the 'staff_ids' parameter in all versions up to, and including, 27.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL qu

CVE-2026-14516

1h agoNIST NVD