Surfer vulnerabilities
4 published CVEs name Surfer among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112222
WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability
Surfer · Surfer
Medium5.4 - CVE-2025-58603
WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability
Surfer · Surfer
Medium5.3 - CVE-2023-35037
WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability
Surfer · Surfer
High7.6 - CVE-2024-49299
WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability
Surfer · Surfer
High7.6