CVE-2026-24638mediumCWE-862

CVE-2026-24638: medium-severity vulnerability in Webful Creations RepairBuddy

WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerability

Published

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected products
Webful Creations · RepairBuddy
Related CVEs — Webful Creations RepairBuddy

In the same product, most dangerous first.

CVE-2026-39584MEDIUMWordPress RepairBuddy plugin <= 4.1132 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-78291MEDIUMWordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97309HIGHWordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-100509MEDIUMWordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%
References
https://patchstack.com/database/wordpress/plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-4-1121-broken-access-control-vulnerability?_s_id=cve