Skip to content
OpenAdvisories

Vendor

roninwp

11 known vulnerabilities.

Products

FAT Services Booking 4 FAT Event Lite 3 Revy 3 FAT Cooming Soon 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.5
    CVE-2025-32924

    WordPress Revy plugin <= 2.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp Revy revy allows SQL Injection.This issue affects Revy: from n/a through <= 2.1.

    roninwp Revy
  • High 8.5
    CVE-2025-39355

    WordPress FAT Services Booking plugin <= 5.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking allows SQL Injection.This issue affects FAT Services Booking: from n/a through <= 5.6.

    roninwp FAT Services Booking
  • High 7.5
    CVE-2025-47693

    WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Services Booking fat-services-booking allows PHP Local File Inclusion.This issue affects FAT Services Booking: from n/a throug…

    roninwp FAT Services Booking
  • High 8.1
    CVE-2025-32663

    WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Cooming Soon fat-coming-soon allows PHP Local File Inclusion.This issue affects FAT Cooming Soon: from n/a through <= 1.1.

    roninwp FAT Cooming Soon
  • High 7.5
    CVE-2025-23915

    WordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through <= 1.1.

    roninwp FAT Event Lite
  • High 8.1
    CVE-2025-22508

    WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through <= 1.1.

    roninwp FAT Event Lite
  • High 7.1
    CVE-2024-54220

    WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roninwp FAT Services Booking fat-services-booking allows Stored XSS.This issue affects FAT Services Booking: from n/a through <= 5.6.

    roninwp FAT Services Booking