CVE-2025-6553

CVE-2025-6553 – Ovatheme Events Manager (WordPress) is an unauthenticated arbitrary file upload vulnerability in the process_checkout() function affecting all versions up to 1.8.5. The root cause is missing file type validation, enabling an attacker to upload arbitrary files to the server, with t...