Skip to content
OpenAdvisories

Vendor

Bastien Ho

10 known vulnerabilities.

Products

Event post 7 Accounting for WooCommerce 2 Custom CSS Addons 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-65486

    WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.

    Bastien Ho Event post
  • Medium 6.5
    CVE-2025-62042

    WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3.

    Bastien Ho Event post
  • Medium 6.5
    CVE-2025-49298

    WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.10.1.

    Bastien Ho Event post
  • Medium 6.5
    CVE-2025-46228

    WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows DOM-Based XSS.This issue affects Event post: from n/a through <= 5.9.11.

    Bastien Ho Event post
  • Medium 6.5
    CVE-2025-26923

    WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.8.

    Bastien Ho Event post
  • Medium 5.9
    CVE-2025-26929

    WordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows Stored XSS.This issue affects Accounting for WooCommerce: from n/a through <= 1.6.8.

    Bastien Ho Accounting for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2025-24585

    WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.7.

    Bastien Ho Event post