What’s Vulnerable › Products

Bastien Ho Event post vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Bastien Ho Event post version is affected

Latest Bastien Ho Event post vulnerabilities

• CVE-2026-65486 — WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-62042 — WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-49298 — WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-46228 — WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)
• CVE-2025-26923 — WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-2167 — Event post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2025-24585 — WordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-10186 — Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode (CVSS 5.4)
• CVE-2024-1375 — Event post <= 5.9.10 - Cross-Site Request Forgery (CVSS 4.3)
• CVE-2024-1376 — Event post <= 5.9.4 - Missing Authorization (CVSS 4.3)
• CVE-2023-49179 — WordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)