ovatheme vulnerabilities

CVEs per yearBy the year they were published

1. 202511
2. 20265

Newest CVEs

• CVE-2026-27400

  WordPress BookPro plugin <= 1.1.0 - Arbitrary File Deletion vulnerability

  Ovatheme · BookPro

  High8.6
• CVE-2026-27093

  WordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerability

  ovatheme · Tripgo

  High8.1
• CVE-2025-69090

  WordPress Remons theme <= 1.3.4 - Local File Inclusion vulnerability

  ovatheme · Remons

  High8.1
• CVE-2025-67963

  WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability

  ovatheme · Movie Booking

  High8.6
• CVE-2025-49994

  WordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability

  ovatheme · Athens

  High8.1
• CVE-2025-7663

  Ovatheme Events Manager <= 1.8.6 - Missing Authorization

  ovatheme · Ovatheme Events Manager

  Medium6.5
• CVE-2025-8561

  Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  ovatheme · Ova Advent

  Medium6.4
• CVE-2025-6553

  Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload

  ovatheme · Ovatheme Events Manager

  Critical9.8
• CVE-2025-54716

  WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability

  ovatheme · Ireca

  High8.1
• CVE-2025-53576

  WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability

  ovatheme · Ovatheme Events

  High8.1