bastho

Products

ProductCVEsExploitedLatest
Event post4–Mar 26, 2025
Accounting for WooCommerce1–Dec 5, 2024

Exploited and recent CVEs

  • CVE-2025-2167 Medium 5.4 Event post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-11324 Medium 6.1 Accounting for WooCommerce <= 1.6.6 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-10186 Medium 6.4 Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode 0.3%
  • CVE-2024-1375 Medium 4.3 Event post <= 5.9.10 - Cross-Site Request Forgery 0.2%
  • CVE-2024-1376 Medium 4.3 Event post <= 5.9.4 - Missing Authorization 0.3%