Ronald Huereca

Products

Product	CVEs	Exploited	Latest
Custom Query Blocks	2	–	Apr 8, 2026
Highlight and Share	2	–	Dec 9, 2025
Photo Block	2	–	Jul 23, 2026
Comment Edit Core – Simple Comment Editing	1	–	Jan 24, 2025

CVE-2026-24639 Medium 4.4 WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability 0.2%
CVE-2026-39575 Medium 6.5 WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-67586 Medium 4.7 WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability 0.4%
CVE-2025-64254 Low 2.7 WordPress Photo Block plugin <= 1.5.1 - Broken Access Control vulnerability 0.2%
CVE-2025-58260 Medium 6.5 WordPress Highlight and Share – Social Text and Image Sharing plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-24703 Medium 4.4 WordPress Comment Edit Core – Simple Comment Editing Plugin <= 3.0.33 - Server Side Request Forgery (SSRF) vulnerability 0.3%
CVE-2024-44059 Medium 6.5 WordPress Custom Query Blocks plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%