Skip to content
OpenAdvisories

Vendor

surflabtech

1 known vulnerabilities.

Products

SurfLink – Link Manager & Backup Restore 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-3552

    SurfLink < 2.6.0 - Missing Authorization to Authenticated (Subscriber+) 410 Gone URL Import via 'surfl_import_410' AJAX Action

    The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the ajax_import_410() function in all versions up to 2.6.0. This is due to a missing capability check (current_user_…

    surflabtech SurfLink – Link Manager & Backup Restore Web / CMS