Skip to contentBastien Ho Event Post vulnerabilities
- bastien ho event postWordPress Event post plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1257816.5 Medium
- bastien ho event postWordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerabilityCVE-2026-1074325.4 Medium
- bastien ho event postWordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-1074276.5 Medium
- bastien ho event postWordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerabilityCVE-2026-654865.3 Medium
- bastien ho event postWordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-620426.5 Medium
- bastien ho event postWordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-492986.5 Medium
- avecnous event postWordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-462286.5 Medium
- bastien ho event postWordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269236.5 Medium
- bastho event postEvent post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-21675.4 Medium
- bastien ho event postWordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2025-245856.5 Medium
- avecnous event postEvent Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal ShortcodeCVE-2024-101866.4 Medium
- bastien ho event postWordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerabilityCVE-2024-387357.5 High
- bastho event postEvent post <= 5.9.10 - Cross-Site Request ForgeryCVE-2024-13754.3 Medium
- avecnous event postEvent post <= 5.9.4 - Missing AuthorizationCVE-2024-13764.3 Medium
- avecnous event postWordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-491796.5 Medium