Medium
CVE-2026-97309
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Medium
CVE-2026-100509
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1225 - Authenticated (Customer+) Stored Cross-Site Scripting
High
CVE-2026-81803
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1224 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2026-78291
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1223 - Missing Authorization
Medium
CVE-2026-24638
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1121 - Missing Authorization
Medium
CVE-2026-39584
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1132 - Missing Authorization
Medium
CVE-2026-3567
RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action
Medium
CVE-2026-39586
RepairBuddy <= 4.1132 - Unauthenticated Information Exposure
Medium
CVE-2026-0820
RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders
Medium
CVE-2025-32277
CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization
Critical
CVE-2024-56061
Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover
High
CVE-2024-12259
CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation
Critical
CVE-2024-51793
Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload
High
642a6d42-100f-4461-b568-35e089287902
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
Medium
03b1376e-8ef3-4bd2-904b-6819aa21d144
Computer Repair Shop < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.