Ronald Huereca vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ronald Huereca products: 5 record(s), with severity, exploitation and fixes.

Highlight and Share 2 Photo Block 2 Custom Query Blocks 1

Exploited only (KEV) →

CVE-2026-24639 Medium · 4.4 CWE-918 Jul 23, 2026

WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability

Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.

CVE-2026-39575 Medium · 6.5 CWE-79 Apr 8, 2026

WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through <= 5.5.0.

CVE-2025-67586 Medium · 4.7 Public exploit CWE-862 Dec 9, 2025

WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0.

CVE-2025-64254 Low · 2.7 CWE-862 Dec 9, 2025

WordPress Photo Block plugin <= 1.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Block: from n/a through <= 1.5.1.

CVE-2025-58260 Medium · 6.5 CWE-79 Sep 22, 2025

WordPress Highlight and Share – Social Text and Image Sharing plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through <= 5.1.1.