Skip to content
OpenAdvisories

Vendor

Bastien Ho

10 known vulnerabilities.

Products

Event post 7 Accounting for WooCommerce 2 Custom CSS Addons 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-30835

    WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows PHP Local File Inclusion.This issue affects Accounting for WooComm…

    Bastien Ho Accounting for WooCommerce Web / CMS
  • High 7.1
    CVE-2025-23578

    WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through <= 1.9.1.

    Bastien Ho Custom CSS Addons
  • High 7.5
    CVE-2024-38735

    WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.9.5.

    Bastien Ho Event post