Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 22:20:33 +0000 CVE-2026-0820 — RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to O… https://cve.radiocsirt.org/vuln/cve-2026-0820 <p><strong>Affected:</strong> sweetdaisy86 RepairBuddy – Repair Shop CRM &amp; Booking Plugin for WordPress</p> <p>The RepairBuddy – Repair Shop CRM &amp; Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wc_upload_and_save_signature_handler function in all versions up to, and including, 4.1116. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary signatures to any order in the system, potentially modifying order metadata and triggering unauthorized status changes.</p> <p><strong>Affected:</strong> sweetdaisy86 RepairBuddy – Repair Shop CRM &amp; Booking Plugin for WordPress</p> <p>The RepairBuddy – Repair Shop CRM &amp; Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing capability checks on the wc_upload_and_save_signature_handler function in all versions up to, and including, 4.1116. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary signatures to any order in the system, potentially modifying order metadata and triggering unauthorized status changes.</p> https://cve.radiocsirt.org/vuln/cve-2026-0820