Unrated severityNVD Advisory· Published Sep 12, 2026

CVE-2026-78152

Description

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Surerankllm-fuzzy
Range: <1.10.1
Package: https://wordpress.org/plugins/surerank

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/f16d3d06-6db0-4c6a-9eee-80b87d886a47/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000