CVE-2026-125450mediumCWE-79

CVE-2026-125450: medium-severity vulnerability in Brainstorm Force SureRank

WordPress SureRank plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor SureRank

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureRank surerank allows Stored XSS.This issue affects SureRank: from n/a through 1.10.3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
Brainstorm Force · SureRank
Related CVEs — Brainstorm Force SureRank

In the same product, most dangerous first.

CVE-2025-62059HIGHWordPress SureRank plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%