Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Surfer Clear all filters
TI-2026-76461 CVE-2026-112222 · GHSA-qh4g-vhpv-7389

Missing authorization in WordPress Surfer plugin

Priority LOW 24

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00168 Published 2026-10-19 No fix listed CWE-862
TI-2025-36271 CVE-2025-58603 · GHSA-8v8h-p6w6-3pwh

WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.6.4.574.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-09-03 No fix listed CWE-862
TI-2023-17513 CVE-2023-35037 · GHSA-6rjq-282f-p3mr

WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability

Priority HIGH 66

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.3.2.357.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00605 Published 2024-12-13 No fix listed CWE-862
TI-2024-32892 CVE-2024-49299 · GHSA-8pmc-cjqv-8vg9

WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Surfer Surfer surferseo allows SQL Injection.This issue affects Surfer: from n/a through <= 1.5.0.502.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00418 Published 2024-10-17 No fix listed CWE-89