Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: sweetdaisy86

CVE IDTitleCVSSSeverityPublished
CVE-2026-3567 RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action CWE-862 5.3 Medium2026-03-20
CVE-2026-0820 RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders CWE-862 4.3 Medium2026-01-17
CVE-2024-12259 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation CWE-862 8.8 High2024-12-18

All 3 known CVE vulnerabilities affecting RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress with full Chinese analysis, references, and POCs where available.