Bastho

5 CVEs across 2 Bastho products. Browse Bastho vulnerabilities, severities, and proof-of-concept exploits.

Bastho products with known CVEs

ProductCVEs
Event Post4
Accounting For Woocommerce1
Bastho CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-2167Medium5.42025-03-26The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'events_list' shortcodes in all versions up to, and including…
CVE-2024-11324Medium6.12024-12-05The Accounting for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escapin…
CVE-2024-10186Medium6.42024-11-06The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's events_cal shortcode in all versions up to, and including, 5…
CVE-2024-1375Medium4.32024-07-12The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing nonce check on the save_bulkdatas function in all versi…
CVE-2024-1376Medium4.32024-05-24The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing capability check on the save_bulkdatas function in all…