Skip to content
OOvatheme
Products
| Product | CVEs | Exploited | Latest |
|---|
| BRW | 3 | – | Jun 27, 2025 |
| Ovatheme Events Manager | 3 | – | Nov 8, 2025 |
| Cube Portfolio | 1 | – | Aug 14, 2025 |
| eventlist | 1 | – | Aug 20, 2025 |
| Ireca | 1 | – | Aug 28, 2025 |
| Movie Booking | 1 | – | Jan 22, 2026 |
| Ova Advent | 1 | – | Oct 15, 2025 |
| Ovatheme Events | 1 | – | Aug 28, 2025 |
| Remons | 1 | – | Mar 5, 2026 |
| Athens | 1 | – | Jan 22, 2026 |
| Tripgo | 1 | – | Mar 19, 2026 |
| BookPro | 1 | – | Jun 17, 2026 |
Exploited and recent CVEs
-
CVE-2026-27400
High 8.6
WordPress BookPro plugin <= 1.1.0 - Arbitrary File Deletion vulnerability
0.5%
-
CVE-2026-27093
High 8.1
WordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerability
0.4%
-
CVE-2025-69090
High 8.1
WordPress Remons theme <= 1.3.4 - Local File Inclusion vulnerability
0.6%
-
CVE-2025-67963
High 8.6
WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability
0.6%
-
CVE-2025-49994
High 8.1
WordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability
0.6%
-
CVE-2025-7663
Medium 6.5
Ovatheme Events Manager <= 1.8.6 - Missing Authorization
0.2%
-
CVE-2025-8561
Medium 6.4
Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
0.2%
-
CVE-2025-6553
Critical 9.8
Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload
0.8%
-
CVE-2025-54716
High 8.1
WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability
0.5%
-
CVE-2025-53576
High 8.1
WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability
0.5%
-
CVE-2025-53204
High 8.1
WordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability
0.7%
-
CVE-2025-52823
High 8.5
WordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection Vulnerability
0.3%
-
CVE-2025-52814
High 8.1
WordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability
0.6%
-
CVE-2025-32510
Critical 10.0
WordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability
0.5%
-
CVE-2025-49314
Medium 6.5
WordPress BRW plugin <= 1.8.6 - Cross Site Scripting (XSS) Vulnerability
0.3%
-
CVE-2025-49313
High 7.5
WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability
0.8%