roninwp

Products

ProductCVEsExploitedLatest
FAT Services Booking4–May 19, 2025
FAT Event Lite3–Jan 21, 2025
Revy3–May 19, 2025
FAT Cooming Soon1–Apr 11, 2025

Exploited and recent CVEs

  • CVE-2025-32924 High 8.5 WordPress Revy plugin <= 2.1 - SQL Injection vulnerability 0.3%
  • CVE-2025-39355 High 8.5 WordPress FAT Services Booking plugin <= 5.6 - SQL Injection vulnerability 0.3%
  • CVE-2025-47693 High 7.5 WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-32663 High 8.1 WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability 1.0%
  • CVE-2025-22718 Medium 6.5 WordPress FAT Event Lite plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-23915 High 7.5 WordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerability 1.1%
  • CVE-2025-22508 High 8.1 WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability 0.7%
  • CVE-2024-54220 High 7.1 WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-54215 Critical 9.3 WordPress Revy plugin <= 1.18 - Unauthenticated SQL Injection vulnerability 0.6%
  • CVE-2024-54214 Critical 10.0 WordPress Revy plugin <= 1.18 - Unauthenticated Arbitrary File Upload vulnerability 0.7%
  • CVE-2024-54221 Critical 9.3 WordPress FAT Services Booking plugin <= 5.6 - Unauthenticated SQL Injection vulnerability 0.4%