Advisories · Technology

Surfer.

Every CVE that names Surfer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118639 CVE record

CVSS 6.5 Medium

Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key Disclosure
- Surfer
- Privilege escalation
Not analysed yet 6 Nov 2026
CVE-2026-112222 CVE record

CVSS 5.4 Medium

WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability
- Surfer
- Broken access control
Not analysed yet 19 Oct 2026
CVE-2025-58603 CVE record

CVSS 5.3 Medium

WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability
- Surfer
- Broken access control
Not analysed yet 3 Sept 2025
CVE-2023-35037 CVE record

CVSS 7.6 High

WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability
- Surfer
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2024-49299 CVE record

CVSS 7.6 High

WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability
- Surfer
- SQL injection
Not analysed yet 17 Oct 2024