Lucene search
K

27 matches found

Vulnrichment
Vulnrichment
added 2026/05/26 8:21 a.m.4 views

CVE-2026-24638 WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121...

4.3CVSS5.8AI score0.00029EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/26 8:20 a.m.6 views

WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin RepairBuddy versions = 4.1121...

4.3CVSS5.8AI score0.00029EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.3 views

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00029EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.16 views

CVE-2026-39586 WordPress RepairBuddy plugin <= 4.1132 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through = 4.1132...

5.3CVSS0.00039EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.2 views

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:12 p.m.1 views

CVE-2026-3567

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the...

5.3CVSS5.9AI score0.0005EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/22 10:4 p.m.1 views

WordPress RepairBuddy plugin <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Settings Modification via wcrepshopsettingssubmission AJAX Action vulnerability discovered by WordFence in WordPress Plugin RepairBuddy versions = 4.1132...

5.3CVSS5.8AI score0.0005EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/03/21 12:16 a.m.0 views

CVE-2026-3567

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the...

5.3CVSS0.0005EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/03/20 11:25 p.m.24 views

CVE-2026-3567 RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the...

5.3CVSS0.0005EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/20 11:25 p.m.7 views

CVE-2026-3567

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the...

5.3CVSS5.9AI score0.0005EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.1 views

PT-2026-26721

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the wc rb get...

5.3CVSS5.9AI score0.0005EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/01/18 4:21 a.m.3 views

CVE-2026-0820

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wcuploadandsavesignaturehandler function in all versions up to, and including, 4.1116. This makes it possible for...

5.3CVSS5.7AI score0.00048EPSS
Exploits0References1
NVD
NVD
added 2026/01/17 4:16 a.m.4 views

CVE-2026-0820

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wcuploadandsavesignaturehandler function in all versions up to, and including, 4.1116. This makes it possible for...

4.3CVSS0.00048EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/17 3:24 a.m.22 views

CVE-2026-0820 RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wcuploadandsavesignaturehandler function in all versions up to, and including, 4.1116. This makes it possible for...

4.3CVSS0.00048EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/17 3:24 a.m.2 views

CVE-2026-0820 RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wcuploadandsavesignaturehandler function in all versions up to, and including, 4.1116. This makes it possible for...

4.3CVSS5.7AI score0.00048EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/17 3:24 a.m.2 views

EUVD-2026-3150

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wcuploadandsavesignaturehandler function in all versions up to, and including, 4.1116. This makes it possible for...

5.3CVSS5.2AI score0.00048EPSS
Exploits0References5
CVE
CVE
added 2026/01/17 3:24 a.m.10 views

CVE-2026-0820

CVE-2026-0820 (RepairBuddy

4.3CVSS5.3AI score0.00048EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-50723

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00218EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2025/05/15 3:52 p.m.316 views

Exploit for Unrestricted Upload of File with Dangerous Type in Webfulcreations Computer_Repair_Shop

Wordpress Computer Repair Shop = 3.8115 - Unauthenticated Arb...

10CVSS9.9AI score0.51569EPSS
Exploits15
Cvelist
Cvelist
added 2025/04/04 3:59 p.m.10 views

CVE-2025-32277 WordPress RepairBuddy plugin <= 3.8213 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through = 3.8213...

4.3CVSS0.00319EPSS
Exploits0References1
Rows per page
Query Builder