CVE-2026-125825: WordPress RepairBuddy plugin <= 4.1236 - Broken Access Control vulnerability
Published Nov 13, 2026
·Updated
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1236.
Affected Software
1 affected component
Webful Creations RepairBuddy<=4.1236
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.1237
Event History
Nov 13, 2026
CVE Published
via MITRE·02:48 PM
Data Sourced
via MITRE·02:48 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which RepairBuddy versions are affected?
The issue affects RepairBuddy versions through 4.1236. No lower bound is provided.
2
Does exploitation require authentication or user interaction?
No. The vector indicates network exploitation with no privileges required and no user interaction required.
3
What is the potential impact of successful exploitation?
The listed impact is low confidentiality impact, with no integrity or availability impact indicated.