CVE-2026-112222
CVE-2026-112222 · WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744.
CVSS 5.4 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
surfer
- Versions
- ≥ 0, ≤ 1.8.0.744: Affected; ≥ 1.8.1.759: Not affected (custom)
Update to 1.8.1.759