REPAIRBUDDY · CVE-2026-125825 · Other
NO FIX YET
RepairBuddy, a WordPress plugin for computer repair shops, has a missing authorization check that lets attackers exercise functions they should not reach. The advisory says it affects all versions through 4.1236.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Sites running the RepairBuddy computer-repair-shop WordPress plugin at version 4.1236 or earlier. Sites without this plugin are not affected. The sources do not say which roles or settings are needed to reach the flawed function.
Not affected if plugin-not-installed
Who cares repairbuddy, self-hosted, wordpress
No fix yet, per the sources.
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1236.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.