CVE-2026-78152 — SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema
The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allow…
Published: 2026-09-12 · CVSS: 5.3 · CVSS 3.1
The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7