CVE-2026-39584
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
RepairBuddy versions up to 4.1132 have a broken access control issue that may allow subscribers unauthorized access to resources.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive data, potentially leading to privacy and security breaches.
Recommendation
It is recommended to update RepairBuddy to the latest version to mitigate the access control vulnerability.
Other vulnerabilities in RepairBuddy
See all- CVE-2026-78291Medium
Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.
- CVE-2026-24638Medium
The RepairBuddy plugin for WordPress up to version 4.1121 suffers from missing authorization, allowing exploitation of incorrectly configured access control levels.
- CVE-2026-39586Medium
The WordPress plugin RepairBuddy (computer-repair-shop) by Ateeq Rafeeq has a vulnerability that inserts sensitive information into sent data, allowing retrieval of embedded sensitive data. This affects versions up to and including 4.1132.
Original NVD description (English source)
Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions.