Read the docs

Bastien Ho

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Bastien Ho records in CISA KEV

No Bastien Ho vulnerabilities are listed in CISA KEV.

Records

9 records

TI-2024-25969 CVE-2024-38735 · GHSA-qgc6-gm7v-g299

WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability

Priority HIGH 72

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.9.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2024-07-12 No fix listed CWE-98
TI-2025-17345 CVE-2025-23578 · GHSA-9pm6-fvgj-xj4x

WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00409 Published 2025-01-22 No fix listed CWE-79
TI-2025-19794 CVE-2025-26923 · GHSA-r9c5-mh6w-wh5v

WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00357 Published 2025-03-26 No fix listed CWE-79
TI-2025-38365 CVE-2025-62042 · GHSA-q458-cphq-v7v4

WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00176 Published 2025-10-22 No fix listed CWE-79
TI-2025-31346 CVE-2025-49298 · GHSA-7w46-48fc-q6vj

WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.10.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
TI-2025-19800 CVE-2025-26929 · GHSA-6hj5-9j3r-gpmm

WordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows Stored XSS.This issue affects Accounting for W…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00376 Published 2025-03-26 No fix listed CWE-79
Open these records in search →