Roninwp vulnerabilities

We track 10 vulnerabilities in Roninwp products across 4 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2025.

10vulnerabilities

3critical

7high

0exploited

8.4average CVSS score

Latest Roninwp vulnerabilities

8.5 High severity
FAT Services Booking: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-39355May 19, 2025Roninwp
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking allows SQL Injection.This issue affects FAT Services Booking: from n/a through <= 5.6.
8.5 High severity
Revy: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-32924May 19, 2025Roninwp
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp Revy revy allows SQL Injection.This issue affects Revy: from n/a through <= 2.1.
7.5 High severity
FAT Services Booking: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-47693May 16, 2025Roninwp
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Services Booking fat-services-booking allows PHP Local File Inclusion.This issue affects FAT Services Booking: from n/a through
8.1 High severity
FAT Cooming Soon: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-32663Apr 11, 2025Roninwp
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Cooming Soon fat-coming-soon allows PHP Local File Inclusion.This issue affects FAT Cooming Soon: from n/a through <= 1.1.
7.5 High severity
FAT Event Lite: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-23915Jan 16, 2025RoninwpEPSS 1.11%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through <= 1.1.
8.1 High severity
FAT Event Lite: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-22508Jan 9, 2025Roninwp
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through <= 1.1.
7.1 High severity
FAT Services Booking: Improper Neutralization of Input During Web Page Generation
CVE-2024-54220Dec 9, 2024Roninwp
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roninwp FAT Services Booking fat-services-booking allows Stored XSS.This issue affects FAT Services Booking: from n/a through <= 5.6.
9.3 Critical severity
Revy: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-54215Dec 9, 2024Roninwp
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp Revy revy.This issue affects Revy: from n/a through <= 1.18.
10.0 Critical severity
Revy: Unrestricted Upload of File with Dangerous Type
CVE-2024-54214Dec 6, 2024Roninwp
Unrestricted Upload of File with Dangerous Type vulnerability in roninwp Revy revy allows Upload a Web Shell to a Web Server.This issue affects Revy: from n/a through <= 1.18.
9.3 Critical severity
FAT Services Booking: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-54221Dec 5, 2024Roninwp
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking.This issue affects FAT Services Booking: from n/a through <= 5.6.