Medium severity5.4NVD Advisory· Published Oct 19, 2026· Updated Oct 19, 2026

CVE-2026-112222

Description

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744.

Affected products

WordPress/Surfer SEOllm-fuzzy
Range: <=1.8.0.744

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/surferseo/vulnerability/wordpress-surfer-plugin-1-8-0-744-broken-access-control-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000