Known vulnerabilities in the Fulltext Search plugin
9 security advisories have been published for the Fulltext Search plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Fulltext Search - Broken Access Control (CVE-2026-84821) HIGH
- Fulltext Search - SQL Injection (CVE-2026-12741) HIGH
- Fulltext Search - Cross-Site Request Forgery (CSRF) (CVE-2025-57893) MEDIUM
- Fulltext Search - Broken Access Control (CVE-2025-30894) MEDIUM
- Fulltext Search - Cross-Site Request Forgery (CSRF) (CVE-2025-24572) MEDIUM
- Fulltext Search - Broken Access Control (CVE-2025-24571) MEDIUM
- Fulltext Search - Cross-Site Request Forgery (CSRF) (CVE-2024-38778) MEDIUM
- Fulltext Search - Broken Access Control (CVE-2024-38714) MEDIUM
- Fulltext Search - Cross-Site Scripting (XSS) (CVE-2024-39663) HIGH