PT-2026-90563

CVE-2026-78152

·

Published

2026-09-12

·

Updated

2026-09-12

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions SureRank SEO WordPress plugin versions prior to 1.10.1
Description The plugin fails to exclude registered account email addresses from the structured data output on public pages by default. This allows unauthenticated visitors to obtain the email addresses of any user who has published content.
Recommendations Update SureRank SEO WordPress plugin to version 1.10.1 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2026-78152
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com