Bastien Ho

Products

ProductCVEsExploitedLatest
Event post7–Jul 23, 2026
Accounting for WooCommerce2–Mar 31, 2025
Custom CSS Addons1–Jan 22, 2025

Exploited and recent CVEs

  • CVE-2026-65486 Medium 5.3 WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62042 Medium 6.5 WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49298 Medium 6.5 WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-46228 Medium 6.5 WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-30835 High 7.5 WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-26923 Medium 6.5 WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-26929 Medium 5.9 WordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-24585 Medium 6.5 WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-23578 High 7.1 WordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-38735 High 7.5 WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability 0.5%