Read the docs

Ronald Huereca

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ronald Huereca records in CISA KEV

No Ronald Huereca vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-28549 CVE-2026-39575 · GHSA-2mw3-cgxq-9prq

WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Bloc…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00167 Published 2026-04-08 No fix listed CWE-79
TI-2025-36065 CVE-2025-58260 · GHSA-mcvj-9gc2-chg6

WordPress Highlight and Share – Social Text and Image Sharing plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-22 No fix listed CWE-79
TI-2025-41340 CVE-2025-67586 · GHSA-p8fx-rcmw-3w3v

WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability

Priority LOW 22

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a throu…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0044 Published 2025-12-09 No fix listed CWE-862
TI-2025-18420 CVE-2025-24703 · GHSA-cgvj-5xxj-mf5j

WordPress Comment Edit Core – Simple Comment Editing Plugin <= 3.0.33 - Server Side Request Forgery (SSRF) vulnerability

Priority LOW 20

Server-Side Request Forgery (SSRF) vulnerability in Ronald Huereca Comment Edit Core – Simple Comment Editing simple-comment-editing allows Server Side Request Forgery.This issue affects Comment Edit Core – Simple Commen…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00331 Published 2025-01-24 No fix listed CWE-918
TI-2025-39697 CVE-2025-64254 · GHSA-46rg-3ch6-xmgj

WordPress Photo Block plugin <= 1.5.1 - Broken Access Control vulnerability

Priority LOW 15

Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Block: from n/a through <= 1.5.1.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00243 Published 2025-12-09 No fix listed CWE-862
Open these records in search →