Approved changes feed: RSS · Atom

cpe:2.3:a:bastien_ho:event_post:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBastien Ho (66cb9679-9d99-59b3-b5d0-ae205b3f1808)
ProductEvent Post (f29eae67-026f-5623-8ad9-d3934d659f2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65486 vulnerable 2026-07-29 01:06:20.074168 WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability
MEDIUM (5.3)
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
Published: 2026-07-23T11:18:55.544Z
Updated: 2026-07-23T15:57:06.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62042 vulnerable 2026-06-08 07:37:28.568186 WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3.
Published: 2025-10-22T14:32:51.413Z
Updated: 2026-04-28T18:50:43.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49298 vulnerable 2026-06-08 07:29:12.883340 WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.10.1.
Published: 2025-06-06T12:53:46.507Z
Updated: 2026-04-28T16:13:00.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46228 vulnerable 2026-06-08 07:25:11.340921 WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows DOM-Based XSS.This issue affects Event post: from n/a through <= 5.9.11.
Published: 2025-04-22T09:53:21.279Z
Updated: 2026-04-28T16:12:36.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26923 vulnerable 2026-06-08 07:14:50.682190 WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through <= 5.9.8.
Published: 2025-03-26T14:44:31.849Z
Updated: 2026-04-28T16:11:43.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24585 vulnerable 2026-06-08 07:12:49.547092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38735 vulnerable 2026-06-08 06:41:48.021609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.