Skip to content
OpenAdvisories

Vendor

Ovatheme

16 known vulnerabilities.

Products

Ovatheme Events Manager 3 BRW 3 Ova Advent 1 Ireca 1 Athens 1 Movie Booking 1 BookPro 1 eventlist 1 Tripgo 1 Cube Portfolio 1 Remons 1 Ovatheme Events 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6553

    Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload

    The Ovatheme Events Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the process_checkout() function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers t…

    Ovatheme Ovatheme Events Manager Web / CMS
  • Critical 10.0
    CVE-2025-32510

    WordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in ovatheme Ovatheme Events Manager ova-events-manager allows Using Malicious Files.This issue affects Ovatheme Events Manager: from n/a through <= 1.8.4.

    Ovatheme Ovatheme Events Manager