Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior
Críticas / altas1403▲ 50 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.22% | — | Webfulcreations RepairbuddyAI | 5/10/2026 | 6/10/2026 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226. | |
| Aplazada | Media (6.5) | 0.17% | — | Webfulcreations RepairbuddyAI | 5/10/2026 | 6/10/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225. | |
| Aplazada | Alta (7.5) | 0.58% | — | RepairbuddyAI | 10/9/2026 | 10/9/2026 | Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions. | |
| Aplazada | Media (5.3) | 0.29% | — | RepairbuddyAI | 24/8/2026 | 24/8/2026 | Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions. | |
| Aplazada | Media (6.5) | 0.34% | — | RepairbuddyAI | 15/6/2026 | 17/6/2026 | Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. | |
| Aplazada | Media (4.3) | 0.22% | — | Webfulcreations RepairbuddyAI | 26/5/2026 | 24/7/2026 | Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121. | |
| Aplazada | Media (5.3) | 0.33% | — | Ateeq Rafeeq RepairbuddyAI | 8/4/2026 | 24/7/2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through <= 4.1132. | |
| Aplazada | Media (5.3) | 0.41% | — | RepairbuddyAI | 21/3/2026 | 17/6/2026 | The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.1132. The plugin exposes two AJAX handlers that, when combined, allow any authenticated user to modify admin-level plugin settings. First, the wc_rb_get_fresh_nonce() function… | |
| Aplazada | Media (4.3) | 0.23% | — | RepairbuddyAI | 17/1/2026 | 17/6/2026 | The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wc_upload_and_save_signature_handler function in all versions up to, and including, 4.1116. This makes it possible for authenticated attackers,… | |
| Aplazada | Media (4.3) | 0.25% | — | Ateeq Rafeeq RepairbuddyAI | 4/4/2025 | 17/6/2026 | Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through <= 3.8213. | |
| Aplazada | Alta (8.8) | 0.43% | — | Ateeq Rafeeq RepairbuddyAI | 31/12/2024 | 17/6/2026 | Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through <= 3.8119. | |
| Aplazada | Alta (8.8) | 0.53% | — | RepairbuddyAI | 18/12/2024 | 17/6/2026 | The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wc_update_user_data AJAX action. This makes… |