Vulnerabilities

TI-2026-03076 CVE-2026-3567 · GHSA-9v48-95f3-hqxh

Missing authorization in sweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin for…

LOW 30

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-03-20 No fix listed CWE-862

TI-2026-00602 CVE-2026-0820 · GHSA-x3g7-vp73-j4gv

Missing authorization in sweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin for…

LOW 20

The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wc_upload_and_save_signature_handler functio…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00233 Published 2026-01-17 No fix listed CWE-862

TI-2024-11370 CVE-2024-12259 · GHSA-cp2r-29q5-494x

CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation

MEDIUM 41

The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00525 Published 2024-12-18 No fix listed CWE-862

Vulnerabilities

Filters

Missing authorization in sweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin for…

Missing authorization in sweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin for…

CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation