CVE-2026-118639 | Surfer Plugin prior 1.8.1.759 on WordPress REST API privileges management

November 6, 2026 Yanac

A vulnerability was found in Surfer Plugin on WordPress. It has been declared as critical. The impacted element is an unknown function of the component REST API. The manipulation results in improper privilege management.

This vulnerability is cataloged as CVE-2026-118639. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More