Skip to content
OpenAdvisories

Vendor

Ovatheme

16 known vulnerabilities.

Products

Ovatheme Events Manager 3 BRW 3 Ova Advent 1 Ireca 1 Athens 1 Movie Booking 1 BookPro 1 eventlist 1 Tripgo 1 Cube Portfolio 1 Remons 1 Ovatheme Events 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.6
    CVE-2026-27400

    WordPress BookPro plugin <= 1.1.0 - Arbitrary File Deletion vulnerability

    Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions.

    Ovatheme BookPro
  • High 8.1
    CVE-2026-27093

    WordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Tripgo tripgo allows PHP Local File Inclusion.This issue affects Tripgo: from n/a through < 1.5.6.

    Ovatheme Tripgo
  • High 8.1
    CVE-2025-69090

    WordPress Remons theme <= 1.3.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Remons remons allows PHP Local File Inclusion.This issue affects Remons: from n/a through <= 1.3.4.

    Ovatheme Remons
  • High 8.6
    CVE-2025-67963

    WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through <= 1.1.5.

    Ovatheme Movie Booking
  • High 8.1
    CVE-2025-49994

    WordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Athens athens allows PHP Local File Inclusion.This issue affects Athens: from n/a through <= 1.1.6.

    Ovatheme Athens
  • High 8.1
    CVE-2025-54716

    WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ireca ireca allows PHP Local File Inclusion.This issue affects Ireca: from n/a through <= 1.8.5.

    Ovatheme Ireca
  • High 8.1
    CVE-2025-53576

    WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Ovatheme Events ova-events allows PHP Local File Inclusion.This issue affects Ovatheme Events: from n/a through <= 1.2.8.

    Ovatheme Ovatheme Events
  • High 8.1
    CVE-2025-53204

    WordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme eventlist eventlist allows PHP Local File Inclusion.This issue affects eventlist: from n/a through <= 1.9.2.

    Ovatheme eventlist
  • High 8.5
    CVE-2025-52823

    WordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ovatheme Cube Portfolio cubeportfolio allows SQL Injection.This issue affects Cube Portfolio: from n/a through <= 1.16.8.

    Ovatheme Cube Portfolio
  • High 8.1
    CVE-2025-52814

    WordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme BRW ova-brw allows PHP Local File Inclusion.This issue affects BRW: from n/a through <= 1.8.7.

    Ovatheme BRW
  • High 7.5
    CVE-2025-49313

    WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme BRW ova-brw allows PHP Local File Inclusion.This issue affects BRW: from n/a through <= 1.8.6.

    Ovatheme BRW