CVE-2026-78152
Received Received - Intake

Exposed User Emails in SureRank SEO WordPress Plugin

Publication date: 2026-09-12

Last updated on: 2026-09-12

Assigner: WPScan

Description
The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-12
Last Modified
2026-09-12
Generated
2026-09-12
AI Q&A
2026-09-12
EPSS Evaluated
N/A
NVD
CVE-2026-78152
EUVD
EUVD-2026-76809

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
surerank surerank_wordpress_plugin to 1.10.1 (exc)
surerank surerank_wordpress_plugin From 1.6.2 (inc) to 1.10.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The SureRank SEO WordPress plugin before version 1.10.1 exposes registered users' email addresses in structured data on public pages by default. This allows unauthenticated visitors to retrieve email addresses of any user who has published content through the Person Schema.

Detection Guidance

Check if your WordPress site is running the SureRank plugin version 1.6.2 to 1.10.0. Inspect public pages for Person Schema structured data containing email addresses. Use tools like WPScan to scan for vulnerable versions.

Impact Analysis

This vulnerability allows attackers to collect email addresses of users who have published content on a WordPress site using the affected plugin. This could lead to spam, phishing attacks, or other malicious activities targeting those users.

Compliance Impact

This vulnerability may violate GDPR as it exposes personal data (email addresses) without consent. It could also conflict with privacy principles in HIPAA if user data is involved. Organizations must address this to maintain compliance.

Mitigation Strategies

Update the SureRank plugin to version 1.10.1 or later immediately. If updating is not possible, disable the plugin temporarily until an update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78152. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart