Authorization Flaw in Surfer Plugin by Surfer

CVE-2025-58603

What is CVE-2025-58603?

The Surfer Plugin for WordPress is susceptible to a missing authorization vulnerability, leading to improperly configured access control security levels. This flaw can allow unauthorized users to gain access to sensitive functionalities within the plugin, potentially compromising the security and integrity of the application. Users of Surfer Plugin versions up to 1.6.4.574 should update to the latest version to mitigate the risks associated with this vulnerability.

References