Vulnerabilities / Surfer
Surfer vulnerabilities
Advisories WPSec published for Surfer – WordPress Plugin. Other sources may list more. Its attack surface: Surfer on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1335 | Surfer <= 1.8.0.744 - Authenticated (Contributor+) Sensitive Information Exposure of Surfer API Key via Post Editor Script Data | High 7.1 | 1.8.1.759 |
License: CC BY 4.0