Skip to content
OpenAdvisories

Vendor

MediaRon

2 known vulnerabilities.

Products

Custom Query Blocks 1 WP Plugin Info Card 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-62127

    WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5.

    MediaRon WP Plugin Info Card
  • Medium 5.3
    CVE-2024-38794

    WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0.

    MediaRon Custom Query Blocks