CVE-2026-125450: WordPress SureRank plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability

Q: Who is exposed to this issue?

Sites running the Brainstorm Force SureRank WordPress plugin are affected if the installed version is 1.10.3 or earlier.

Q: What does an attacker need to exploit it?

The supplied vector indicates network-reachable exploitation with low attack complexity, but it requires low-level privileges and user interaction.

Q: What is the potential impact?

The issue is stored XSS and may affect confidentiality, integrity, and availability at a low impact level. Its scope is changed, meaning the impact can extend beyond the vulnerable plugin's security authority.

Published Nov 11, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureRank surerank allows Stored XSS.This issue affects SureRank: from n/a through 1.10.3.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress SureRank plugin to a version that resolves this vulnerability.
Fixed in 1.11.0

Event History

Nov 11, 2026

CVE Published

via MITRE·12:35 PM

Data Sourced

via MITRE·12:35 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Sites running the Brainstorm Force SureRank WordPress plugin are affected if the installed version is 1.10.3 or earlier.

What does an attacker need to exploit it?

The supplied vector indicates network-reachable exploitation with low attack complexity, but it requires low-level privileges and user interaction.

What is the potential impact?

The issue is stored XSS and may affect confidentiality, integrity, and availability at a low impact level. Its scope is changed, meaning the impact can extend beyond the vulnerable plugin's security authority.

CVE-2026-125450: WordPress SureRank plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?