What is CVE-2026-78152?

CVE-2026-78152 is a medium-severity vulnerability in Surerank Seo, classified under Information Disclosure. CVSS score: 5.3/10. Published 2026-09-12.

How severe is CVE-2026-78152?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Surerank Seo

CVE-2026-78152

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.

Vulnerability class: Information Disclosure

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Unknown Surerank Seo

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-78152?: CVE-2026-78152 is a medium-severity vulnerability in Surerank Seo, classified under Information Disclosure. CVSS score: 5.3/10. Published 2026-09-12.
How severe is CVE-2026-78152?: Medium severity. CVSS v3 base score is 5.3 out of 10.