sweetdaisy86 RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress

• CVE-2026-3567 Medium 5.3 RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action 0.2%
• CVE-2026-0820 Medium 4.3 RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders 0.2%
• CVE-2024-12259 High 8.8 CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation 0.5%