sweetdaisy86
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | 3 | – | Mar 20, 2026 |
Exploited and recent CVEs
- CVE-2026-3567 RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action 0.2%
- CVE-2026-0820 RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders 0.2%
- CVE-2024-12259 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation 0.5%