CVE-2025-32277 MEDIUM

CVE-2025-32277: WordPress RepairBuddy plugin <= 3.8213 - Broken Access Control vulnerability

Vendor Ateeq Rafeeq
Product RepairBuddy
Weakness CWE-862 · Missing authorization
Published April 4, 2025
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through <= 3.8213.

Key dates

02Disclosure timeline

April 4, 2025 CVE published
April 28, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-67973 WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks) CVE-2026-45285 Nextcloud: Hidden Public Link creation when sharing to a Team External Member CVE-2024-0983 ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in enableOptimization CVE-2021-4446 Essential Addons for Elementor <= 4.6.4 - Missing Authorization