CVE-2026-3552 | surflabtech SurfLink Plugin up to 2.5.x on WordPress AJAX class.surflink-ajax.php ajax_import_410 urls improper authorization

July 11, 2026 Yanac

A vulnerability described as problematic has been identified in surflabtech SurfLink Plugin up to 2.5.x on WordPress. The affected element is the function ajax_import_410 of the file class.surflink-ajax.php of the component AJAX Handler. Executing a manipulation of the argument urls can lead to improper authorization.

This vulnerability is handled as CVE-2026-3552. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More