medium4.7Public exploit code
CVE-2025-67586
Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin 5.2.0 - Broken Access Control2026-04-22 · webapps · multiple
Impact
Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0.
Affected products
| Product | Affected versions |
|---|---|
| Highlight And Share: From N/A Through | through 5.2.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.