Bastien Ho vulnerabilities

Products

• Event Post 14
• Accounting For Woocommerce 3
• Eelv Newsletter 2

Newest

• bastien ho event post WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability CVE-2026-107432 5.4 MediumOctober 12, 2026
• bastien ho event post WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-107427 6.5 MediumOctober 12, 2026
• bastien ho event post WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability CVE-2026-65486 5.3 MediumJuly 23, 2026
• bastien ho event post WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-62042 6.5 MediumOctober 22, 2025
• bastien ho event post WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49298 6.5 MediumJune 6, 2025
• avecnous event post WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability CVE-2025-46228 6.5 MediumApril 22, 2025
• bastien ho accounting for woocommerce WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability CVE-2025-30835 7.5 HighMarch 31, 2025
• bastien ho event post WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-26923 6.5 MediumMarch 26, 2025
• bastien ho accounting for woocommerce WordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-26929 5.9 MediumMarch 26, 2025
• bastho event post Event post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-2167 5.4 MediumMarch 26, 2025
• bastien ho event post WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-24585 6.5 MediumJanuary 24, 2025
• bastien ho eelv newsletter WordPress EELV Newsletter plugin <= 4.8.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23602 7.1 HighJanuary 22, 2025
• bastien ho custom css addons WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23578 7.1 HighJanuary 22, 2025
• bastien ho eelv newsletter WordPress EELV Newsletter plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-54430 5.4 MediumDecember 16, 2024
• bastho accounting for woocommerce Accounting for WooCommerce <= 1.6.6 - Reflected Cross-Site Scripting CVE-2024-11324 6.1 MediumDecember 5, 2024
• avecnous event post Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode CVE-2024-10186 6.4 MediumNovember 6, 2024
• bastien ho event post WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability CVE-2024-38735 7.5 HighJuly 12, 2024
• bastho event post Event post <= 5.9.10 - Cross-Site Request Forgery CVE-2024-1375 4.3 MediumJuly 12, 2024
• avecnous event post Event post <= 5.9.4 - Missing Authorization CVE-2024-1376 4.3 MediumMay 24, 2024
• avecnous event post WordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49179 6.5 MediumDecember 15, 2023