Approved changes feed: RSS · Atom

cpe:2.3:a:roninwp:fat_services_booking:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRoninwp (36f85266-e3aa-59a1-9313-ee3b9707f71e)
ProductFat Services Booking (d4623a06-700d-5dcc-add1-37fbf02a5e90)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47693 vulnerable 2026-06-08 07:27:14.736230 WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Services Booking fat-services-booking allows PHP Local File Inclusion.This issue affects FAT Services Booking: from n/a through <= 5.5.
Published: 2025-05-16T15:45:17.462Z
Updated: 2026-04-28T16:12:50.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39355 vulnerable 2026-06-08 07:23:06.433919 WordPress FAT Services Booking plugin <= 5.6 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking allows SQL Injection.This issue affects FAT Services Booking: from n/a through <= 5.6.
Published: 2025-05-19T19:46:07.807Z
Updated: 2026-04-28T16:12:29.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54221 vulnerable 2026-06-08 06:54:16.198472 WordPress FAT Services Booking plugin <= 5.6 - Unauthenticated SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking fat-services-booking.This issue affects FAT Services Booking: from n/a through <= 5.6.
Published: 2024-12-04T23:27:15.475Z
Updated: 2026-04-28T16:10:47.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54220 vulnerable 2026-06-08 06:54:16.197918 WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roninwp FAT Services Booking fat-services-booking allows Stored XSS.This issue affects FAT Services Booking: from n/a through <= 5.6.
Published: 2024-12-09T12:47:42.443Z
Updated: 2026-04-28T16:10:47.338Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.