Extension WordPress
Vulnérabilités Surfer – WordPress Plugin
Cette page rassemble les failles publiées pour Surfer – WordPress Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Surfer – WordPress Plugin
3 fiches
Surfer <= 1.6.4.574 – Missing Authorization
The Surfer – WordPress Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.6.4.574. This makes it possible for unauthenticated attackers to…
*-1.6.4.574
1.6.5.584
03/09/2025
Surfer <= 1.5.0.502 – Authenticated (Administrator+) SQL Injection
The Surfer plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.5.0.502 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes…
*-1.5.0.502
1.6.0.523
15/10/2024
Surfer <= 1.3.2.357 – Missing Authorization
The Surfer plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on several functions, such as remove_post_draft_connection, check_draft_status, get_locations, get_ajax_surfer_connect_url, disconnect_surfer_from_wp, and check_connection_status called via AJAX actions in versions up…
*-1.3.2.357
1.3.3.379
01/09/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.