Surfer

Products

ProductCVEsExploitedLatest
Surfer4–Oct 19, 2026

Exploited and recent CVEs

  • CVE-2026-112222 Medium 5.4 WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability 0.2%
  • CVE-2025-58603 Medium 5.3 WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability 0.3%
  • CVE-2023-35037 High 7.6 WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability 0.6%
  • CVE-2024-49299 High 7.6 WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability 0.4%