Skip to content
OpenAdvisories

Vendor

Ronald Huereca

7 known vulnerabilities.

Products

Custom Query Blocks 2 Photo Block 2 Highlight and Share 2 Comment Edit Core – Simple Comment Editing 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-24639

    WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability

    Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.

    Ronald Huereca Photo Block
  • Medium 6.5
    CVE-2026-39575

    WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through <= 5.5.0.

    Ronald Huereca Custom Query Blocks
  • Medium 4.7
    CVE-2025-67586 Public exploit

    WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0.

    Ronald Huereca Highlight and Share
  • Medium 6.5
    CVE-2025-58260

    WordPress Highlight and Share – Social Text and Image Sharing plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through <= 5.1.1.

    Ronald Huereca Highlight and Share
  • Medium 4.4
    CVE-2025-24703

    WordPress Comment Edit Core – Simple Comment Editing Plugin <= 3.0.33 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Ronald Huereca Comment Edit Core – Simple Comment Editing simple-comment-editing allows Server Side Request Forgery.This issue affects Comment Edit Core – Simple Comment Editing: from n/a through <= 3.0.33.

    Ronald Huereca Comment Edit Core – Simple Comment Editing
  • Medium 6.5
    CVE-2024-44059

    WordPress Custom Query Blocks plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through <= 5.3.1.

    Ronald Huereca Custom Query Blocks