Threat Database

Threat Entry Updated 2026-11-12

RepairBuddy - Security Vulnerability (CVE-2026-125434)

Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1235.

PLUGIN RepairBuddy

CVE-2026-125434

MEDIUM CVSS 5.4 2026-11-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-12

RepairBuddy - Security Vulnerability (CVE-2026-125438)

Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1235.

PLUGIN RepairBuddy

CVE-2026-125438

MEDIUM CVSS 5.3 2026-11-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-10

RepairBuddy - Remote Code Execution (CVE-2026-81803)

Subscriber Remote Code Execution (RCE) in RepairBuddy

PLUGIN RepairBuddy

CVE-2026-81803

HIGH CVSS 7.5 2026-09-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-12

RepairBuddy - Broken Access Control (CVE-2026-78291)

Unauthenticated Broken Access Control in RepairBuddy

PLUGIN RepairBuddy

CVE-2026-78291

MEDIUM CVSS 5.3 2026-08-24

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

RepairBuddy - Broken Access Control (CVE-2026-39584)

Subscriber Broken Access Control in RepairBuddy

PLUGIN RepairBuddy

CVE-2026-39584

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

RepairBuddy - Security Vulnerability (CVE-2026-3567)

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the wc_rb_get_fresh_nonce() function (registered via wp_ajax and wp_ajax_nopriv hooks) allows any user to generate a valid WordPress nonce for any arbitrary action name by simply providing the nonce_name parameter, with no capability checks. Second, the wc_rep_shop_settings_submission() function only verifies the nonce (wcrb_main_setting_nonce) but performs no current_user_can() capability…

PLUGIN RepairBuddy

CVE-2026-3567

MEDIUM CVSS 5.3 2026-03-21

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

RepairBuddy - Broken Access Control (CVE-2026-0820)

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wc_upload_and_save_signature_handler function in all versions up to, and including, 4.1116. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary signatures to any order in the system, potentially modifying order metadata and triggering unauthorized status changes.

PLUGIN RepairBuddy

CVE-2026-0820

MEDIUM CVSS 4.3 2026-01-17

Risk Score

Open Full Technical Breakdown