EUVD-2026-64829
GHSA-w57j-q9v5-j75v
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Network-accessible WordPress endpoint requires no privileges or interaction; impact confined to partial integrity modification with no confidentiality or availability consequence.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
1DescriptionCVE.org
Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.
AnalysisAI
Broken access control in the RepairBuddy WordPress plugin (versions up to and including 4.1223) allows unauthenticated remote attackers to perform unauthorized actions against affected WordPress installations. The root cause is CWE-862 (Missing Authorization), meaning one or more plugin endpoints or AJAX handlers execute privileged operations without verifying the requesting user's identity or capability. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The RepairBuddy plugin must be installed and active on a WordPress site. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS 3.1 score of 5.3 (Medium) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N reflects straightforward remote exploitability tempered by a limited integrity-only impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker discovers a WordPress site running RepairBuddy by fingerprinting the plugin via standard enumeration techniques, then sends a crafted HTTP POST request to the affected plugin endpoint (likely a WordPress AJAX action or REST route) without any session token or capability check, successfully invoking a restricted function to modify or create repair job records. No public proof-of-concept has been identified, but the low attack complexity suggests exploitation is straightforward for any attacker familiar with WordPress plugin vulnerability patterns. |
| Remediation | No exact patched version is confirmed in the available source data - the Patchstack advisory should be consulted directly at https://patchstack.com/database/wordpress/plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-4-1223-broken-access-control-vulnerability for release details. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Repairbuddy
View allBroken access control in the RepairBuddy WordPress plugin (versions ≤ 4.1132) allows subscriber-level authenticated user
RepairBuddy plugin for WordPress versions through 4.1132 exposes sensitive data in network transmissions due to improper
Broken access control in the RepairBuddy WordPress plugin (versions through 4.1121) allows authenticated low-privileged
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today