Ronald Huereca

7 CVEs across 4 Ronald Huereca products. Browse Ronald Huereca vulnerabilities, severities, and proof-of-concept exploits.

Ronald Huereca products with known CVEs

ProductCVEs
Custom Query Blocks2
Highlight And Share2
Photo Block2
Comment Edit Core – Simple Comment Editing1
Ronald Huereca CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24639Medium4.42026-07-23Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.
CVE-2026-39575Medium6.52026-04-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapp…
CVE-2025-67586Medium4.72025-12-09Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-64254Low2.72025-12-09Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2025-58260Medium6.52025-09-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Highlight and Share highlight-and-share al…
CVE-2025-24703Medium4.42025-01-24Server-Side Request Forgery (SSRF) vulnerability in Ronald Huereca Comment Edit Core – Simple Comment Editing simple-comment-editing allows Server Side Request…
CVE-2024-44059Medium6.52024-09-15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapp…