PHP Remote File Inclusion Vulnerability in Ovatheme Events by Ovatheme
CVE-2025-53576

8.1HIGH

Key Information:

Vendor

WordPress
Status
Ovatheme Events
Vendor
CVE Published:
28 August 2025

What is CVE-2025-53576?

The Ovatheme Events plugin contains a PHP Remote File Inclusion vulnerability that allows attackers to exploit improper handling of file inclusion controls. This can lead to unauthorized access to local files on the server, potentially compromising sensitive information. Affected versions include those prior to and including 1.2.8, highlighting the importance of timely updates and vigilance in web security practices.

Affected Version(s)

Ovatheme Events <= 1.2.8

References

https://patchstack.com/database/wordpress/plugin/ova-even...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phat RiO - BlueRock (Patchstack Alliance)
.
CVE-2025-53576 : PHP Remote File Inclusion Vulnerability in Ovatheme Events by Ovatheme