CVE-2026-125438: WordPress RepairBuddy plugin <= 4.1235 - Broken Access Control vulnerability

Q: Which RepairBuddy versions are affected?

The issue affects RepairBuddy versions through 4.1235. The available data does not identify a fixed version.

Q: Does exploitation require authentication or user interaction?

No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected impact if exploited?

The supplied severity data indicates low confidentiality impact, with no identified integrity or availability impact.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1235.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress RepairBuddy plugin to a version that resolves this vulnerability.
Fixed in 4.1236

Event History

Nov 11, 2026

CVE Published

via MITRE·11:46 AM

Data Sourced

via MITRE·11:46 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·12:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which RepairBuddy versions are affected?

The issue affects RepairBuddy versions through 4.1235. The available data does not identify a fixed version.

Does exploitation require authentication or user interaction?

No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the expected impact if exploited?

The supplied severity data indicates low confidentiality impact, with no identified integrity or availability impact.

CVE-2026-125438: WordPress RepairBuddy plugin <= 4.1235 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which RepairBuddy versions are affected?

Does exploitation require authentication or user interaction?

What is the expected impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

Which RepairBuddy versions are affected?

Does exploitation require authentication or user interaction?

What is the expected impact if exploited?