Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-09
Computer Repair Shop - Security Vulnerability (CVE-2026-119514)
Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through 4.1234.
PLUGIN
Computer Repair Shop
CVE-2026-119514
Risk Score
Threat Entry
Updated 2026-10-06
Computer Repair Shop - Security Vulnerability (CVE-2026-97309)
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226.
PLUGIN
Computer Repair Shop
CVE-2026-97309
Risk Score
Threat Entry
Updated 2026-10-06
Computer Repair Shop - Security Vulnerability (CVE-2026-100509)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225.
PLUGIN
Computer Repair Shop
CVE-2026-100509
Risk Score
Threat Entry
Updated 2026-09-10
Computer Repair Shop - Remote Code Execution (CVE-2026-81803)
Subscriber Remote Code Execution (RCE) in RepairBuddy
PLUGIN
Computer Repair Shop
CVE-2026-81803
Risk Score
Threat Entry
Updated 2026-10-12
Computer Repair Shop - Broken Access Control (CVE-2026-78291)
Unauthenticated Broken Access Control in RepairBuddy
PLUGIN
Computer Repair Shop
CVE-2026-78291
Risk Score
Threat Entry
Updated 2026-07-24
Computer Repair Shop - Broken Access Control (CVE-2026-24638)
Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121.
PLUGIN
Computer Repair Shop
CVE-2026-24638
Risk Score
Threat Entry
Updated 2026-07-24
Computer Repair Shop - Information Disclosure (CVE-2026-39586)
Insertion of Sensitive Information Into Sent Data vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through
PLUGIN
Computer Repair Shop
CVE-2026-39586
Risk Score
Threat Entry
Updated 2026-06-17
Computer Repair Shop - Security Vulnerability (CVE-2026-3567)
The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the wc_rb_get_fresh_nonce() function (registered via wp_ajax and wp_ajax_nopriv hooks) allows any user to generate a valid WordPress nonce for any arbitrary action name by simply providing the nonce_name parameter, with no capability checks. Second, the wc_rep_shop_settings_submission() function only verifies the nonce (wcrb_main_setting_nonce) but performs no current_user_can() capability…
PLUGIN
Computer Repair Shop
CVE-2026-3567
Risk Score
Threat Entry
Updated 2026-06-17
Computer Repair Shop - Broken Access Control (CVE-2026-0820)
The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wc_upload_and_save_signature_handler function in all versions up to, and including, 4.1116. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary signatures to any order in the system, potentially modifying order metadata and triggering unauthorized status changes.
PLUGIN
Computer Repair Shop
CVE-2026-0820
Risk Score
Threat Entry
Updated 2026-06-17
Computer Repair Shop - Broken Access Control (CVE-2025-32277)
Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through
PLUGIN
Computer Repair Shop
CVE-2025-32277
Risk Score
Threat Entry
Updated 2026-06-17
Computer Repair Shop - Privilege Escalation (CVE-2024-56061)
Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through
PLUGIN
Computer Repair Shop
CVE-2024-56061
Risk Score
Threat Entry
Updated 2026-06-17
Computer Repair Shop - Arbitrary File Upload (CVE-2024-51793)
Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through
PLUGIN
Computer Repair Shop
CVE-2024-51793
Risk Score