Log out
Get PRO

Latest

Input validation vulnerability in FAT Services Booking 5.6

  • Severity: medium-risk
  • Status: Open
  • Publication: April 21, 2025

The FAT Services Booking plugin for WordPress, up to version 5.6, has a security vulnerability called SQL Injection. This is because the plugin does not properly handle certain user inputs and does not have enough protection for its existing database queries. This could allow attackers who have at least subscriber-level access to add their own SQL queries to existing ones, which can then be used to access sensitive information from the database.

Detected in:

FAT Services Booking open vulnerable versions: >= * <= 5.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.