CVE-2026-78152 — SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema

CVE-2026-78152

SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema PUBLISHED

Description (CNA)

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.

Affected (CNA)

Vendor / product	Versions
Unknown / SureRank SEO	affected 1.6.2 before 1.10.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/f16d3d06-6db0-4c6a-9eee-80b87d886a47/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.