No recent security news found for Ovatheme.
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-69090 PoC | 8.1 HIGH | PATCH UNDER REVIEW | 0.17% | 2026-03-05 |
| CVE-2025-49994 PoC | 8.1 HIGH | PATCH UNDER REVIEW | 0.22% | 2026-01-22 |
| CVE-2025-7663 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.14% | 2025-11-08 |
| CVE-2025-54716 PoC | 8.1 HIGH | PATCH UNDER REVIEW | 0.16% | 2025-08-28 |
| CVE-2025-53576 PoC | 8.1 HIGH | PATCH UNDER REVIEW | 0.16% | 2025-08-28 |
| CVE-2025-53204 PoC | 8.1 HIGH | PATCH UNDER REVIEW | 0.16% | 2025-08-20 |
| CVE-2025-52814 | 8.1 HIGH | PATCH UNDER REVIEW | 0.55% | 2025-06-27 |
| CVE-2025-49314 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.14% | 2025-06-06 |
| CVE-2025-49313 PoC | 7.5 HIGH | PATCH UNDER REVIEW | 0.42% | 2025-06-06 |
Ovatheme is a Vietnamese company that develops and sells WordPress themes and plugins, primarily through marketplaces like ThemeForest. Their products are widely used for building websites, but the vendor has been associated with multiple security vulnerabilities (14 CVEs) in their themes and plugins, making them relevant for cybersecurity monitoring of WordPress-based sites.
Based on 2 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.