Read the docs

roninwp

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

roninwp records in CISA KEV

No roninwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Revy 1 record LOW

Records

11 records

TI-2025-23728 CVE-2025-32663 · GHSA-chpp-64fw-7gfq

WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Cooming Soon fat-coming-soon allows PHP Local File Inclusion.This issue affects FAT Coo…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00963 Published 2025-04-11 No fix listed CWE-98
TI-2025-16394 CVE-2025-22508 · GHSA-8v2f-ggrg-q9f6

WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00724 Published 2025-01-09 No fix listed CWE-98
TI-2025-26097 CVE-2025-39355 · GHSA-rhc9-85rp-3j38

WordPress FAT Services Booking plugin <= 5.6 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking allows SQL Injection.This issue affects FAT Services Booking: from n…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-19 No fix listed CWE-89
TI-2025-23945 CVE-2025-32924 · GHSA-v7hf-vpqg-3mwp

WordPress Revy plugin <= 2.1 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp Revy revy allows SQL Injection.This issue affects Revy: from n/a through <= 2.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-19 No fix listed CWE-89
TI-2025-17682 CVE-2025-23915 · GHSA-rqfm-55j7-9vwg

WordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01113 Published 2025-01-16 No fix listed CWE-98
TI-2025-30190 CVE-2025-47693 · GHSA-mpq9-qw6g-7f69

WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Services Booking fat-services-booking allows PHP Local File Inclusion.This issue affect…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0062 Published 2025-05-16 No fix listed CWE-98
TI-2024-36309 CVE-2024-54220 · GHSA-j94f-4hmh-hx5v

WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roninwp FAT Services Booking fat-services-booking allows Stored XSS.This issue affects FAT Services Booking: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00369 Published 2024-12-09 No fix listed CWE-79
TI-2025-16600 CVE-2025-22718 · GHSA-rjjv-v2f9-mvc3

WordPress FAT Event Lite plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roninwp FAT Event Lite fat-event-lite allows Stored XSS.This issue affects FAT Event Lite: from n/a through <= 1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-21 No fix listed CWE-79
Open these records in search →