CVE-2026-125434: WordPress RepairBuddy plugin <= 4.1235 - Broken Access Control vulnerability

Q: Who can exploit this vulnerability?

An attacker needs an account with low-level privileges, as indicated by the PR:L vector. No user interaction is required, and the issue can be reached over the network.

Q: What impact can successful exploitation have?

The vulnerability can affect integrity and availability, while no confidentiality impact is identified. The reported CVSS vector assigns low impact to both integrity and availability.

Q: Which RepairBuddy versions are affected?

RepairBuddy versions through 4.1235 are affected. The available data does not identify a fixed version.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1235.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress RepairBuddy plugin to a version that resolves this vulnerability.
Fixed in 4.1236

Event History

Nov 11, 2026

CVE Published

via MITRE·11:43 AM

Data Sourced

via MITRE·11:43 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·12:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker needs an account with low-level privileges, as indicated by the PR:L vector. No user interaction is required, and the issue can be reached over the network.

What impact can successful exploitation have?

The vulnerability can affect integrity and availability, while no confidentiality impact is identified. The reported CVSS vector assigns low impact to both integrity and availability.

Which RepairBuddy versions are affected?

RepairBuddy versions through 4.1235 are affected. The available data does not identify a fixed version.

CVE-2026-125434: WordPress RepairBuddy plugin <= 4.1235 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What impact can successful exploitation have?

Which RepairBuddy versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What impact can successful exploitation have?

Which RepairBuddy versions are affected?