blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2026-78152

MEDIUM 5.3 CVSS 3.1
Published
September 12, 2026
Last modified
September 14, 2026
NVD status
Deferred
Reported by
contact@wpscan.com
Weakness
CWE-200
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.

Affected products and versions

  • Unknown SureRank SEO — From 1.6.2 (including) to 1.10.1 (excluding)

References

  • wpscan.com https://wpscan.com/vulnerability/f16d3d06-6db0-4c6a-9eee-80b87d886a47/
  • nvd.nist.gov Official NVD record