Missing Authorization Vulnerability in RepairBuddy by Webful Creations
CVE-2026-97309

7.1HIGH

Key Information:

Vendor

WordPress
Status
Repairbuddy
Vendor
CVE Published:
5 October 2026

What is CVE-2026-97309?

A missing authorization vulnerability has been identified in the RepairBuddy application by Webful Creations. This flaw allows unauthorized users to retrieve sensitive embedded data within the application, potentially compromising user information. The affected versions range from n/a through 4.1226, necessitating immediate action for affected users to mitigate potential data breaches.

Affected Version(s)

RepairBuddy 0 <= 4.1226

References

https://patchstack.com/database/wordpress/plugin/computer...
vdb-entry

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack)
.