bastho
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Event post | 4 | – | Mar 26, 2025 |
| Accounting for WooCommerce | 1 | – | Dec 5, 2024 |
Exploited and recent CVEs
- CVE-2025-2167 Event post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-11324 Accounting for WooCommerce <= 1.6.6 - Reflected Cross-Site Scripting 0.4%
- CVE-2024-10186 Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode 0.3%
- CVE-2024-1375 Event post <= 5.9.10 - Cross-Site Request Forgery 0.2%
- CVE-2024-1376 Event post <= 5.9.4 - Missing Authorization 0.3%