TI-2026-03062 CVE-2026-3552 · GHSA-vgw6-5938-gvqv
Missing authorization in surflabtech SurfLink – Link Manager & Backup Restore
Priority LOW 20
The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the ajax_import_410() function in all versions up to 2.6.0.