Bastien Ho vulnerabilities
We track 3 vulnerabilities in Bastien Ho products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2025.
Latest Bastien Ho vulnerabilities
- 7.5 High severity
Accounting for WooCommerce: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Accounting for WooCommerce accounting-for-woocommerce allows PHP Local File Inclusion.This issue affects Accounting for WooComme
- 7.1 High severity
Custom CSS Addons: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom CSS Addons css-addons allows Reflected XSS.This issue affects Custom CSS Addons: from n/a through <= 1.9.1.
- 7.5 High severity
Event post: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.9.5.