{"affected":[{"defaultStatus":"unaffected","product":"Surfer","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.8.1.759","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118639","cwes":["CWE-269"],"description":"The Surfer  WordPress plugin before 1.8.1.759 discloses a sensitive API credential to low-privileged users through the post editor page and relies on that same credential as the sole authorization for its privileged REST API, allowing users with contributor-level access and above to read the credential and escalate to publishing arbitrary posts and other privileged actions.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/0cc6b6cd-ff1a-4f04-a2f5-62684abeb314/"}],"kev":null,"metrics":[],"modifiedAt":1793944826032,"publishedAt":1793944826032,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/0cc6b6cd-ff1a-4f04-a2f5-62684abeb314/"}],"remediation":[],"revision":"c5b4317e9bd0df6d2b43800ea18a2f08e62433bf8126d880e33cd4a8ab37464e","sources":[{"modifiedAt":1793944826032,"name":"CNA: WPScan","retrievedAt":1793945325962,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118639"}],"ssvc":null,"status":"published","title":"Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key Disclosure","updatedAt":1793945325962}