79 matches found
CVE-2025-32277 WordPress RepairBuddy plugin <= 3.8213 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through = 3.8213...
CVE-2025-32277
Technical details about CVE-2025-32277 (RepairBuddy) are not provided in the supplied documents. Monitor for updates from official advisories regarding affected versions, impact, and fixes.
WordPress plugin RepairBuddy 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-15030 · Ateeq Rafeeq · Repairbuddy
Name of the Vulnerable Software and Affected Versions: Ateeq Rafeeq RepairBuddy versions n/a through 3.8211 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...
Exploit for Unrestricted Upload of File with Dangerous Type in Webfulcreations Computer_Repair_Shop
🛡️ WordPress RepairBuddy Plugin Exploit 📜 CVE Information...
CVE-2024-12259
The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...
CVE-2024-56061 WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability
Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...
CVE-2024-56061 WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability
Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...
WordPress RepairBuddy plugin <= 3.8119 - Account Takeover vulnerability
Account Takeover vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin RepairBuddy versions = 3.8119...
CVE-2024-12259
The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...
CVE-2024-12259 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation
The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...
CVE-2024-12259 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation
The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...
CVE-2024-12259
CVE-2024-12259 affects the CRM WordPress Plugin – RepairBuddy (all versions up to 3.8120). Root cause: missing authorization/identity validation when updating a user’s email via the wc_update_user_data AJAX action, enabling authenticated attackers with subscriber+ to change any user email (includ...
PT-2024-17513 · WordPress · Crm Wordpress Plugin – Repairbuddy
Name of the Vulnerable Software and Affected Versions: CRM WordPress Plugin – RepairBuddy versions up to 3.8120 Description: The issue arises from the plugin not properly validating a user's identity before updating their email through the wc update user data AJAX action. This allows authenticate...
WordPress plugin RepairBuddy 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress CRM WordPress Plugin plugin <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation vulnerability
Missing Authorization to Account Takeover/Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin RepairBuddy versions = 3.8120...
CVE-2024-51793 WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...
CVE-2024-51793 WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...
WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin RepairBuddy versions = 3.8115...