Bastien Ho vulnerabilities and threats

9 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-65486Event post (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65486 Unauthenticated Broken Access Control in Event post <= 6.0.1 versions. EPSS 0.3%Vulnerability Bastien Ho CWE-862	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2025-62042Event post (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-10-22CVE Database V5CVE-2025-62042 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3. EPSS 0.2%Vulnerability Bastien Ho	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.3%	CVE-2025-49298Event post (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-06-06CVE Database V5CVE-2025-49298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.10.1. EPSS 0.3%Vulnerability Bastien Ho	CVE Database V5	2025-06-06
High	7.5	EPSS 0.5%	CVE-2025-30835Accounting for WooCommerce (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2025-03-31CVE Database V5CVE-2025-30835 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows PHP Local File Inclusion.This issue affects Accounting for WooCommerce: from n/a through <= 1.6.8. EPSS 0.5%Vulnerability Bastien Ho	CVE Database V5	2025-03-31
Medium	6.5	EPSS 0.4%	CVE-2025-26923Event post (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2025-03-26CVE Database V5CVE-2025-26923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.8. EPSS 0.4%Vulnerability Bastien Ho	CVE Database V5	2025-03-26
Medium	5.9	EPSS 0.4%	CVE-2025-26929Accounting for WooCommerce (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.4%2025-03-26CVE Database V5CVE-2025-26929 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows Stored XSS.This issue affects Accounting for WooCommerce: from n/a through <= 1.6.8. EPSS 0.4%Vulnerability Bastien Ho	CVE Database V5	2025-03-26
Medium	6.5	EPSS 0.4%	CVE-2025-24585Event post (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2025-01-24CVE Database V5CVE-2025-24585 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.7. EPSS 0.4%Vulnerability Bastien Ho	CVE Database V5	2025-01-24
High	7.1	EPSS 0.4%	CVE-2025-23578Custom CSS Addons (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2025-01-22CVE Database V5CVE-2025-23578 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through <= 1.9.1. EPSS 0.4%Vulnerability Bastien Ho	CVE Database V5	2025-01-22
High	7.5	EPSS 0.5%	CVE-2024-38735Event post (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2024-07-12CVE Database V5CVE-2024-38735 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.9.5. EPSS 0.5%Vulnerability Bastien Ho	CVE Database V5	2024-07-12

Page 1 of 1