A vulnerability was found in Ovatheme Events Manager Plugin up to 1.8.6 on WordPress. It has been classified as critical. This affects an unknown part of the file /class-ovaem-ajax.php. The manipulation leads to missing authorization.
This vulnerability is listed as CVE-2025-7663. The attack may be initiated remotely. There is no available exploit.
