Ovatheme vulnerabilities

Products

• Brw 3
• Events Manager 3
• Bookpro 2

Newest

• about envato bookpro WordPress BookPro plugin <= 1.1.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-66123 5.3 MediumJune 26, 2026
• ovatheme bookpro WordPress BookPro plugin <= 1.1.0 - Arbitrary File Deletion vulnerability CVE-2026-27400 8.6 HighJune 17, 2026
• ovatheme tripgo WordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerability CVE-2026-27093 8.1 HighMarch 19, 2026
• ovatheme remons WordPress Remons theme <= 1.3.4 - Local File Inclusion vulnerability CVE-2025-69090 8.1 HighMarch 5, 2026
• ovatheme movie booking WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability CVE-2025-67963 8.6 HighJanuary 22, 2026
• ovatheme athens WordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability CVE-2025-49994 8.1 HighJanuary 22, 2026
• ovatheme events manager Ovatheme Events Manager <= 1.8.6 - Missing Authorization CVE-2025-7663 6.5 MediumNovember 8, 2025
• ovatheme ova advent Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-8561 6.4 MediumOctober 15, 2025
• ovatheme events manager Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload CVE-2025-6553 9.8 CriticalOctober 11, 2025
• ovatheme ireca WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability CVE-2025-54716 8.1 HighAugust 28, 2025
• ovatheme events WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability CVE-2025-53576 8.1 HighAugust 28, 2025
• ovatheme eventlist WordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability CVE-2025-53204 8.1 HighAugust 20, 2025
• ovatheme cube portfolio WordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection Vulnerability CVE-2025-52823 8.5 HighAugust 14, 2025
• ovatheme brw WordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability CVE-2025-52814 8.1 HighJune 27, 2025
• ovatheme events manager WordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability CVE-2025-32510 10.0 CriticalJune 17, 2025
• ovatheme brw WordPress BRW plugin <= 1.8.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49314 6.5 MediumJune 6, 2025
• ovatheme brw WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability CVE-2025-49313 7.5 HighJune 6, 2025