CVE-2026-78152

medium

Description

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.

References

https://wpscan.com/vulnerability/f16d3d06-6db0-4c6a-9eee-80b87d886a47/

Details

Source: Mitre, NVD

Published: 2026-09-12

Updated: 2026-09-14

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N