Bastien Ho

10 CVEs across 3 Bastien Ho products. Browse Bastien Ho vulnerabilities, severities, and proof-of-concept exploits.

Bastien Ho products with known CVEs

ProductCVEs
Event Post7
Accounting For Woocommerce2
Custom CSS Addons1
Bastien Ho CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65486Medium5.32026-07-23Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
CVE-2025-62042Medium6.52025-10-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event…
CVE-2025-49298Medium6.52025-06-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This i…
CVE-2025-46228Medium6.52025-04-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows DOM-Based XSS.Thi…
CVE-2025-30835High7.52025-03-31Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Accounting for WooCommerce…
CVE-2025-26929Medium5.92025-03-26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-wooc…
CVE-2025-26923Medium6.52025-03-26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This i…
CVE-2025-24585Medium6.52025-01-24Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This i…
CVE-2025-23578High7.12025-01-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected…
CVE-2024-38735High7.52024-07-12Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This…