Bastien Ho
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Event post | 7 | – | Jul 23, 2026 |
| Accounting for WooCommerce | 2 | – | Mar 31, 2025 |
| Custom CSS Addons | 1 | – | Jan 22, 2025 |
Exploited and recent CVEs
- CVE-2026-65486 WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability 0.3%
- CVE-2025-62042 WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-49298 WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
- CVE-2025-46228 WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-30835 WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability 0.5%
- CVE-2025-26923 WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2025-26929 WordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2025-24585 WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2025-23578 WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-38735 WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability 0.5%