Lucene search
+L

79 matches found

Cvelist
Cvelist
added 2025/04/04 3:59 p.m.26 views

CVE-2025-32277 WordPress RepairBuddy plugin <= 3.8213 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through = 3.8213...

4.3CVSS0.00243EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/04 3:59 p.m.41 views

CVE-2025-32277

Technical details about CVE-2025-32277 (RepairBuddy) are not provided in the supplied documents. Monitor for updates from official advisories regarding affected versions, impact, and fixes.

4.3CVSS7.2AI score0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.6 views

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS5.9AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/04 12:00 a.m.6 views

PT-2025-15030 · Ateeq Rafeeq · Repairbuddy

Name of the Vulnerable Software and Affected Versions: Ateeq Rafeeq RepairBuddy versions n/a through 3.8211 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

4.3CVSS5.3AI score0.00243EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/03/24 12:38 a.m.593 views

Exploit for Unrestricted Upload of File with Dangerous Type in Webfulcreations Computer_Repair_Shop

🛡️ WordPress RepairBuddy Plugin Exploit 📜 CVE Information...

10CVSS9.6AI score0.0183EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2025/02/05 10:34 a.m.15 views

CVE-2024-12259

The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...

8.8CVSS9.6AI score0.0051EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/31 1:18 p.m.6 views

CVE-2024-56061 WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...

8.8CVSS8.6AI score0.00431EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/31 1:18 p.m.41 views

CVE-2024-56061 WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...

8.8CVSS0.00431EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/18 2:01 p.m.7 views

WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability

Account Takeover vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin RepairBuddy versions = 3.8119...

8.8CVSS7AI score0.00431EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/18 4:15 a.m.29 views

CVE-2024-12259

The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...

8.8CVSS0.0051EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/12/18 3:22 a.m.29 views

CVE-2024-12259 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation

The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...

8.8CVSS0.0051EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/12/18 3:22 a.m.11 views

CVE-2024-12259 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation

The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...

8.8CVSS7.2AI score0.0051EPSS
SaveExploits0References4
CVE
CVE
added 2024/12/18 3:22 a.m.66 views

CVE-2024-12259

CVE-2024-12259 affects the CRM WordPress Plugin – RepairBuddy (all versions up to 3.8120). Root cause: missing authorization/identity validation when updating a user’s email via the wc_update_user_data AJAX action, enabling authenticated attackers with subscriber+ to change any user email (includ...

8.8CVSS8.9AI score0.0051EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/18 12:00 a.m.11 views

PT-2024-17513 · WordPress · Crm Wordpress Plugin – Repairbuddy

Name of the Vulnerable Software and Affected Versions: CRM WordPress Plugin – RepairBuddy versions up to 3.8120 Description: The issue arises from the plugin not properly validating a user's identity before updating their email through the wc update user data AJAX action. This allows authenticate...

8.8CVSS9.7AI score0.0051EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2024/12/18 12:00 a.m.9 views

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS8.2AI score0.0051EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/12/17 5:28 p.m.9 views

WordPress CRM WordPress Plugin plugin <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation vulnerability

Missing Authorization to Account Takeover/Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin RepairBuddy versions = 3.8120...

8.8CVSS7AI score0.0051EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/11 5:52 a.m.82 views

CVE-2024-51793 WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...

10CVSS0.0183EPSS
SaveExploits4References1
Vulnrichment
Vulnrichment
added 2024/11/11 5:52 a.m.18 views

CVE-2024-51793 WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...

10CVSS8.5AI score0.0183EPSS
SaveExploits4References1
Patchstack
Patchstack
added 2024/11/08 8:39 a.m.10 views

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin RepairBuddy versions = 3.8115...

10CVSS7AI score0.0183EPSS
SaveExploits4Affected Software1
Rows per page
Query Builder