Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: roninwp Clear all filters
TI-2025-23945 CVE-2025-32924 · GHSA-v7hf-vpqg-3mwp

WordPress Revy plugin <= 2.1 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp Revy revy allows SQL Injection.This issue affects Revy: from n/a through <= 2.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-19 No fix listed CWE-89
TI-2025-26097 CVE-2025-39355 · GHSA-rhc9-85rp-3j38

WordPress FAT Services Booking plugin <= 5.6 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking allows SQL Injection.This issue affects FAT Services Booking: from n…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00335 Published 2025-05-19 No fix listed CWE-89
TI-2025-30190 CVE-2025-47693 · GHSA-mpq9-qw6g-7f69

WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Services Booking fat-services-booking allows PHP Local File Inclusion.This issue affect…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0062 Published 2025-05-16 No fix listed CWE-98
TI-2025-23728 CVE-2025-32663 · GHSA-chpp-64fw-7gfq

WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Cooming Soon fat-coming-soon allows PHP Local File Inclusion.This issue affects FAT Coo…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00963 Published 2025-04-11 No fix listed CWE-98
TI-2025-16600 CVE-2025-22718 · GHSA-rjjv-v2f9-mvc3

WordPress FAT Event Lite plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roninwp FAT Event Lite fat-event-lite allows Stored XSS.This issue affects FAT Event Lite: from n/a through <= 1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-21 No fix listed CWE-79
TI-2025-17682 CVE-2025-23915 · GHSA-rqfm-55j7-9vwg

WordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01113 Published 2025-01-16 No fix listed CWE-98
TI-2025-16394 CVE-2025-22508 · GHSA-8v2f-ggrg-q9f6

WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00724 Published 2025-01-09 No fix listed CWE-98
TI-2024-36309 CVE-2024-54220 · GHSA-j94f-4hmh-hx5v

WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roninwp FAT Services Booking fat-services-booking allows Stored XSS.This issue affects FAT Services Booking: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00369 Published 2024-12-09 No fix listed CWE-79