CVE-2024-12259

CVE-2024-12259 affects the CRM WordPress Plugin – RepairBuddy (all versions up to 3.8120). Root cause: missing authorization/identity validation when updating a user’s email via the wc_update_user_data AJAX action, enabling authenticated attackers with subscriber+ to change any user email (includ...

CVE-2024-12259 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation

The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wcupdateuserdata AJAX...

PT-2024-17513 · WordPress · Crm Wordpress Plugin – Repairbuddy

Name of the Vulnerable Software and Affected Versions: CRM WordPress Plugin – RepairBuddy versions up to 3.8120 Description: The issue arises from the plugin not properly validating a user's identity before updating their email through the wc update user data AJAX action. This allows authenticate...

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress CRM WordPress Plugin plugin <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation vulnerability

Missing Authorization to Account Takeover/Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin RepairBuddy versions = 3.8120...

CVE-2024-51793 WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...

CVE-2024-51793 WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin RepairBuddy versions = 3.8115...