Surfer

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-112222 Oct 19, 13:28 MEDIUM This Month

Missing authorization in the Surfer WordPress plugin through 1.8.0.744 lets an authenticated low-privileged user exploit an incorrectly configured access-control check to read or modify limited site data over the network without user interaction. The issue is rated CVSS 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), and no public exploit was identified at time of analysis.

WordPress Authentication Bypass Wordpress Plugin Surfer

NVD

CVSS 3.1

5.4

EPSS

0.2%

CVE-2026-112222

EPSS 0% CVSS 5.4

MEDIUM This Month

Missing authorization in the Surfer WordPress plugin through 1.8.0.744 lets an authenticated low-privileged user exploit an incorrectly configured access-control check to read or modify limited site data over the network without user interaction. The issue is rated CVSS 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), and no public exploit was identified at time of analysis.

WordPress Authentication Bypass Wordpress Plugin +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy