WordPress plugin
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 18 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High3
- Medium13
- Low0
All RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Remote Code Execution ≤4.1224Update to 4.1225 | CVE-2026-81803 | |
| Critical9.8 | Authenticated (Customer+) Privilege Esclation via Account Takeover ≤3.8119Update to 3.8120 | CVE-2024-56061 | |
| High8.8 | Missing Authorization to Account Takeover/Privilege Escalation ≤3.8120Update to 3.8122 | CVE-2024-12259 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤3.8115Update to 3.8116 | CVE-2024-51793 | |
| High8.8 | SQL Injection ≤3.72Update to 3.73 | — |
- High8.8Authenticated (Subscriber+) Remote Code Execution
≤4.1224Update to 4.1225
- Critical9.8Authenticated (Customer+) Privilege Esclation via Account Takeover
≤3.8119Update to 3.8120
- High8.8Missing Authorization to Account Takeover/Privilege Escalation
≤3.8120Update to 3.8122
- Critical9.8Unauthenticated Arbitrary File Upload
≤3.8115Update to 3.8116
- High8.8SQL Injection
≤3.72Update to 3.73
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress: common questions
Does RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 18 known vulnerabilities in RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress: 2 critical, 3 high, 13 medium. None are known to affect version null.
How do I check which version of RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress vulnerability?
CVE-2026-125438, published Nov 11, 2026: RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1235 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress vulnerability listed in CISA KEV?
No. None of the known RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress vulnerabilities is currently listed in the CISA KEV catalog.