What’s Vulnerable › Products

Ovatheme Events Manager vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Ovatheme Events Manager version is affected

Latest Ovatheme Events Manager vulnerabilities

• CVE-2025-7663 — Ovatheme Events Manager <= 1.8.6 - Missing Authorization (CVSS 6.5)
• CVE-2025-6553 — Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
• CVE-2025-32510 — WordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability (CVSS 10.0)