Vulnerabilities

TI-2026-67827 CVE-2026-97309 · GHSA-w384-r393-g736

Missing authorization in RepairBuddy plugin exposes sensitive data

LOW 31

Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00225 Published 2026-10-05 No fix listed CWE-862

TI-2026-67828 CVE-2026-100509 · GHSA-j25q-m3fw-5v57

Stored cross-site scripting in WordPress RepairBuddy plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00166 Published 2026-10-05 No fix listed CWE-79

TI-2026-54462 CVE-2026-78291 · GHSA-w57j-q9v5-j75v

WordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerability

LOW 30

Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-08-24 No fix listed CWE-862

TI-2026-28558 CVE-2026-39584 · GHSA-q8xf-858j-xmfh

WordPress RepairBuddy plugin <= 4.1132 - Broken Access Control vulnerability

LOW 29

Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00326 Published 2026-06-15 No fix listed CWE-862

TI-2026-19877 CVE-2026-24638 · GHSA-4q36-23hm-63mg

WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-05-26 No fix listed CWE-862

TI-2024-34697 CVE-2024-51793 · GHSA-vw9p-qc5q-j6rw

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

MEDIUM 53

Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through <= 3.8115.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01845 Published 2024-11-11 No fix listed CWE-434