TI-2026-46656 CVE-2026-65486 · GHSA-h2c8-cc4j-v4f7
WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability
Priority LOW 30
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
Vulnerabilities
9 records
TI-2025-38365 CVE-2025-62042 · GHSA-q458-cphq-v7v4
WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3.
TI-2025-31346 CVE-2025-49298 · GHSA-7w46-48fc-q6vj
WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.10.1.
TI-2025-22105 CVE-2025-30835 · GHSA-hv9c-rjmp-rrpr
WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows PHP Local File Inclusion.Th…
TI-2025-19794 CVE-2025-26923 · GHSA-r9c5-mh6w-wh5v
WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.8.
TI-2025-19800 CVE-2025-26929 · GHSA-6hj5-9j3r-gpmm
WordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
Priority LOW 27
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows Stored XSS.This issue affects Accounting for W…
TI-2025-18302 CVE-2025-24585 · GHSA-gpm9-2hwg-767x
WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.7.
TI-2025-17345 CVE-2025-23578 · GHSA-9pm6-fvgj-xj4x
WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through <=…
TI-2024-25969 CVE-2024-38735 · GHSA-qgc6-gm7v-g299
WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability
Priority HIGH 72
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.9.5.