CVE-2024-38735: falha de alta gravidade em Bastien Ho Event post
WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 7.5epss 0.5%
da publicação à arma
Publicada no NVD12 de jul.
VulnCheck11 de jul.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.9.5.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Bastien Ho · Event postCVEs relacionadas — Bastien Ho Event post
No mesmo produto, das mais perigosas para as menos.
CVE-2025-24585MEDIUMWordPress Event post plugin <= 5.9.7 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-26923MEDIUMWordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-65486MEDIUMWordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-49298MEDIUMWordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-46228MEDIUMWordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-62042MEDIUMWordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%