Approved changes feed: RSS · Atom

cpe:2.3:a:surfer:surfer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSurfer (4682e602-35dc-5bbc-b54c-cedd4cea5fab)
ProductSurfer (c9dd05e4-f587-552a-8419-e0f64411b53a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-112222 vulnerable 2026-11-03 10:16:28.083010 WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744.
Published: 2026-10-19T13:28:19.208Z
Updated: 2026-10-19T14:59:04.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58603 vulnerable 2026-06-08 07:35:18.876403 WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.6.4.574.
Published: 2025-09-03T14:36:41.143Z
Updated: 2026-05-12T00:38:49.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49299 vulnerable 2026-06-08 06:50:13.407054 WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Surfer Surfer surferseo allows SQL Injection.This issue affects Surfer: from n/a through <= 1.5.0.502.
Published: 2024-10-17T17:27:56.653Z
Updated: 2026-04-28T16:10:24.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35037 vulnerable 2026-06-08 06:06:26.425580 WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability
HIGH (7.6)
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <= 1.3.2.357.
Published: 2024-12-13T14:23:38.299Z
Updated: 2026-04-29T09:51:49.165Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.