WordPress Vulnerability Scanner WPSec
Vulnerabilities / RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress

RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress vulnerabilities

Advisories WPSec published for RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress. Other sources may list more. Its attack surface: RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-10 WPSEC-2026-2827 RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1235 - Unauthenticated Insecure Direct Object Reference to Arbitrary Job Message Posting and Case Number Disclosure via wcrb_post_customer_message_status AJAX Action Medium 6.5 4.1236
2026-11-10 WPSEC-2026-2826 RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1235 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Deletion and Modification via Devices & Services AJAX Actions High 8.1 4.1236

License: CC BY 4.0