Webful Creations vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Webful Creations products: 5 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-97309 High · 7.1 CWE-862 Oct 5, 2026

WordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226.

CVE-2026-100509 Medium · 6.5 CWE-79 Oct 5, 2026

WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225.

CVE-2026-78291 Medium · 5.3 CWE-862 Aug 24, 2026

WordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.

CVE-2026-39584 Medium · 6.5 CWE-862 Jun 15, 2026

WordPress RepairBuddy plugin <= 4.1132 - Broken Access Control vulnerability

Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions.

CVE-2026-24638 Medium · 4.3 CWE-862 May 26, 2026

WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121.