Ronald Huereca vulnerabilities and threats

7 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.4	EPSS 0.2%	CVE-2026-24639Photo Block (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.4EPSS 0.2%2026-07-23CVE Database V5CVE-2026-24639 Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions. EPSS 0.2%Vulnerability Ronald Huereca CWE-918	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2026-39575Custom Query Blocks (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39575 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through <= 5.5.0. EPSS 0.2%Vulnerability Ronald Huereca	CVE Database V5	2026-04-08
Medium	4.7	EPSS 0.4%	CVE-2025-67586Highlight and Share (WordPress plugin) · Missing Authorization Medium4.7EPSS 0.4%2025-12-09CVE Database V5CVE-2025-67586 Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0. EPSS 0.4%Vulnerability Ronald Huereca	CVE Database V5	2025-12-09
Low	2.7	EPSS 0.2%	CVE-2025-64254Photo Block (WordPress plugin) · Missing Authorization Low2.7EPSS 0.2%2025-12-09CVE Database V5CVE-2025-64254 Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Block: from n/a through <= 1.5.1. EPSS 0.2%Vulnerability Ronald Huereca CWE-862	CVE Database V5	2025-12-09
Medium	6.5	EPSS 0.2%	CVE-2025-58260Highlight and Share (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-58260 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through <= 5.1.1. EPSS 0.2%Vulnerability Ronald Huereca	CVE Database V5	2025-09-22
Medium	4.4	EPSS 0.3%	CVE-2025-24703Comment Edit Core (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.4EPSS 0.3%2025-01-24CVE Database V5CVE-2025-24703 Server-Side Request Forgery (SSRF) vulnerability in Ronald Huereca Comment Edit Core – Simple Comment Editing simple-comment-editing allows Server Side Request Forgery.This issue affects Comment Edit Core – Simple Comment Editing: from n/a through <= 3.0.33. EPSS 0.3%Vulnerability Ronald Huereca	CVE Database V5	2025-01-24
Medium	6.5	EPSS 0.3%	CVE-2024-44059Custom Query Blocks (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-09-15CVE Database V5CVE-2024-44059 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through <= 5.3.1. EPSS 0.3%Vulnerability Ronald Huereca	CVE Database V5	2024-09-15

Page 1 of 1