CVE-2026-119514mediumCWE-266

CVE-2026-119514: medium-severity vulnerability in Webful Creations RepairBuddy

WordPress RepairBuddy plugin <= 4.1234 - Privilege Escalation vulnerability

Published

Follow this CVE+ Monitor RepairBuddy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3
Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through 4.1234.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Webful Creations · RepairBuddy
Related CVEs — Webful Creations RepairBuddy

In the same product, most dangerous first.

CVE-2026-39584MEDIUMWordPress RepairBuddy plugin <= 4.1132 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-78291MEDIUMWordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97309HIGHWordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-24638MEDIUMWordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-100509MEDIUMWordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%