Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-7663 2 Ovatheme, Wordpress 2 Events Manager Plugin, Wordpress 2026-04-21 6.5 Medium
The Ovatheme Events Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the /class-ovaem-ajax.php file in all versions up to, and including, 1.8.6. This makes it possible for unauthenticated attackers to delete ticket files, download tickets, and more.