Known vulnerabilities in RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress

WordPress Repair Shop CRM: Manage online bookings, appointments, devices, invoices, and payments. The all-in-one plugin for repair service tracking.

12Reported vulnerabilities

9.8Highest CVSS score

4.1223Latest version

500+Active installs

What to do now

Update RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress to 4.1224 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-51793	Critical 9.8	1.8%	3.8115 and earlier	`3.8116`	November 8, 2024
CVE-2024-56061	Critical 9.8	0.4%	3.8119 and earlier	`3.8120`	December 18, 2024
CVE-2024-12259	High 8.8	0.5%	3.8120 and earlier	`3.8122`	December 17, 2024
WF-642a6d42-100f-4461-b568-35e089287902	High 8.8	—	3.72 and earlier	`3.73`	May 19, 2022
WF-03b1376e-8ef3-4bd2-904b-6819aa21d144	Medium 6.6	—	Before 2.0	`2.0`	January 13, 2020
CVE-2026-78291	Medium 5.3	0.2%	4.1223 and earlier	`4.1224`	August 24, 2026
CVE-2026-3567	Medium 5.3	0.2%	0 to 4.1132 (inclusive)	`4.1133`	March 21, 2026
CVE-2026-39586	Medium 5.3	0.2%	4.1132 and earlier	`4.1133`	February 26, 2026
CVE-2026-24638	Medium 4.3	0.2%	4.1121 and earlier	`4.1125`	May 26, 2026
CVE-2026-39584	Medium 4.3	0.3%	4.1132 and earlier	`4.1133`	April 20, 2026
CVE-2026-0820	Medium 4.3	0.2%	0 to 4.1116 (inclusive)	`4.1121`	January 17, 2026
CVE-2025-32277	Medium 4.3	0.2%	3.8213 and earlier	`3.8214`	April 4, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.