Ovatheme Events Manager vulnerabilities

2 known vulnerabilities in Ovatheme Events Manager from Ovatheme. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Ovatheme Events Manager: Unrestricted Upload of File with Dangerous Type

  CVE-2025-6553Oct 11, 2025Ovatheme

  The Ovatheme Events Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the process_checkout() function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to

• 10.0 Critical severity

  Ovatheme Events Manager: Unrestricted Upload of File with Dangerous Type

  CVE-2025-32510Jun 17, 2025Ovatheme

  Unrestricted Upload of File with Dangerous Type vulnerability in ovatheme Ovatheme Events Manager ova-events-manager allows Using Malicious Files.This issue affects Ovatheme Events Manager: from n/a through <= 1.8.4.