Threats tagged 'ghsa-8h59-9955-wv9r'

The Ovatheme Events Manager plugin for WordPress contains a vulnerability due to missing capability checks in several functions within the /class-ovaem-ajax.php file. This flaw affects all versions up to and including 1.8.6 and allows unauthenticated attackers to perform unauthorized actions such as deleting and downloading ticket files.