CVE-2025-6553 | Ovatheme Events Manager Plugin up to 1.8.5 on WordPress process_checkout unrestricted upload

October 11, 2025 Yanac

A vulnerability was found in Ovatheme Events Manager Plugin up to 1.8.5 on WordPress. It has been rated as critical. This issue affects the function process_checkout. The manipulation leads to unrestricted upload.

This vulnerability is listed as CVE-2025-6553. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More