CVE-2025-32510

Severity

CRITICAL

CVSS

10.0

EPSS

0.00417

Risk score

40.15

CISA KEV

PoC

Published

2025-06-17

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2025-18546, GHSA-V665-PM95-X242

Products

ovatheme:Ovatheme Events Manager 0 ≤1.8.4

Sources

euvd EUVD-2025-18546

Description

Unrestricted Upload of File with Dangerous Type vulnerability in ovatheme Ovatheme Events Manager ova-events-manager allows Using Malicious Files.This issue affects Ovatheme Events Manager: from n/a through <= 1.8.4.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18546
https://patchstack.com/database/Wordpress/Plugin/ova-events-manager/vulnerability/wordpress-ovatheme-events-manager-plugin-1-7-5-arbitrary-file-upload-vulnerability?_s_id=cve