RepairBuddy vulnerabilities

The RepairBuddy plugin in versions up to 4.1224 contains a Remote Code Execution (RCE) vulnerability. An attacker with subscriber privileges can execute code remotely.

The RepairBuddy WordPress plugin (versions up to 4.1226) contains a Missing Authorization vulnerability that allows retrieval of embedded sensitive data. The lack of proper access control enables an unauthenticated user to access sensitive information.

The RepairBuddy plugin for WordPress (computer-repair-shop) is vulnerable to stored XSS due to improper neutralization of input during web page generation. This affects versions from n/a through 4.1225.

Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.

RepairBuddy versions up to 4.1132 have a broken access control issue that may allow subscribers unauthorized access to resources.

The RepairBuddy plugin for WordPress up to version 4.1121 suffers from missing authorization, allowing exploitation of incorrectly configured access control levels.

The WordPress plugin RepairBuddy (computer-repair-shop) by Ateeq Rafeeq has a vulnerability that inserts sensitive information into sent data, allowing retrieval of embedded sensitive data. This affects versions up to and including 4.1132.