Bastho
5 CVEs across 2 Bastho products. Browse Bastho vulnerabilities, severities, and proof-of-concept exploits.
Bastho products with known CVEs
Bastho CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-2167 | Medium | 5.4 | 2025-03-26 | The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'events_list' shortcodes in all versions up to, and including… |
CVE-2024-11324 | Medium | 6.1 | 2024-12-05 | The Accounting for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escapin… |
CVE-2024-10186 | Medium | 6.4 | 2024-11-06 | The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's events_cal shortcode in all versions up to, and including, 5… |
CVE-2024-1375 | Medium | 4.3 | 2024-07-12 | The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing nonce check on the save_bulkdatas function in all versi… |
CVE-2024-1376 | Medium | 4.3 | 2024-05-24 | The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing capability check on the save_bulkdatas function in all… |