RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress

RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress has 15 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 15 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 3 high. 2026 was the busiest year with 9 disclosures.

The most common weakness is Missing Authorization, behind 8 of the records (53%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 15 issues recorded for RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress has a vendor fix available, so running the current release closes all known holes.

12 independent researchers contributed these findings, most of them (2) reported by Ananda Dhakal. RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

01234567891026.02.2016Today13.01.20206.6Computer Repair Shop < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 6.6 · 13.01.202019.05.20228.8CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection CVSS 8.8 · 19.05.202208.11.20249.8Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 08.11.202417.12.20248.8CRM WordPress Plugin – RepairBuddy <= 3.8120 - Missing Authorization to Account Takeover/Privilege Escalation CVSS 8.8 · 17.12.202418.12.20249.8Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover CVSS 9.8 · 18.12.202404.04.20254.3CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization CVSS 4.3 · 04.04.202516.01.20264.3RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders CVSS 4.3 · 16.01.202626.02.20265.3RepairBuddy <= 4.1132 - Unauthenticated Information Exposure CVSS 5.3 · 26.02.202620.03.20265.3RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action CVSS 5.3 · 20.03.202620.04.20264.3RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1132 - Missing Authorization CVSS 4.3 · 20.04.202626.05.20264.3RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1121 - Missing Authorization CVSS 4.3 · 26.05.202624.08.20265.3RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1223 - Missing Authorization CVSS 5.3 · 24.08.202609.09.20268.8RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1224 - Authenticated (Subscriber+) Remote Code Execution CVSS 8.8 · 09.09.202603.10.20266.4RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1225 - Authenticated (Customer+) Stored Cross-Site Scripting CVSS 6.4 · 03.10.20264.3RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1226 - Authenticated (Subscriber+) Information Exposure CVSS 4.3 · 03.10.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

15

Get automatic notifications for all RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-56061

Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover

Read the full analysis

Vulnerability Records

15 records
2026-10-03 17:41CVE-2026-97309
4.3
Medium
Ananda DhakalYes
2026-10-03 17:30CVE-2026-100509
6.4
Medium
Ananda DhakalYes
2026-09-09 00:00CVE-2026-81803
8.8
High
Nasur ullahYes
2026-08-24 00:00CVE-2026-78291
5.3
Medium
Supakiad S. (m3ez)Yes
2026-05-26 00:00CVE-2026-24638
4.3
Medium
Legion HunterYes
2026-04-20 00:00CVE-2026-39584
4.3
Medium
Trương Hữu Phúc (truonghuuphuc)Yes
2026-03-20 00:00CVE-2026-3567
5.3
Medium
chaeypYes
2026-02-26 00:00CVE-2026-39586
5.3
Medium
Trương Hữu Phúc (truonghuuphuc)Yes
2026-01-16 14:36CVE-2026-0820
4.3
Medium
Teerachai SomprasongYes
2025-04-04 00:00CVE-2025-32277
4.3
Medium
Dhabaleshwar DasYes
Showing 1–10 of 15 reports
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress banner
Latestv4.1234

RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress

Ateeq Rafeeq

Author

Ateeq Rafeeq

4.9(24)
98/100
Last Updated
2026-10-19 (9d ago)
Active Installs
400+
Downloads
41,808
Requires WP
6.5+
Requires PHP
8.1+
Tested up to
WP 7.1.3
Created
2016-02-26 (11y ago)

RepairBuddy is a complete Repair Shop CRM, Repair Management System and Online Booking Plugin for WordPress. Designed especially for cell phone repair shops, smartphone repair businesses, computer repair shops, laptop repair centers and electronics repair businesses, RepairBuddy gives you the tools to manage your repair operation from your WordPress website. RepairBuddy can also be adapted for many other repair and service businesses, including watch repair, jewelry repair, camera repair, drone repair, bicycle repair, appliance repair, TV repair, HVAC repair, automotive repair and more. Instead of using separate tools for bookings, repair tickets, estimates, customer management, invoices and repair status tracking, RepairBuddy brings your repair workflow together in one WordPress-based system. What Can RepairBuddy Do? With RepairBuddy, you can: Accept online repair bookings directly from your WordPress website. Schedule repair appointments and available time slots. Manage customers, devices, brands, models and repair services. Create and manage repair jobs, repair tickets and work orders. Send professional repair estimates and allow customers to approve or reject them. Assign repair jobs to technicians and manage technician workloads. Track repair progress with customizable job statuses. Let customers check repair status online using a case number or other identifiers. Manage parts, services and extras for repair jobs. Create professional repair invoices and payment receipts. Accept online payments through WooCommerce and record offline payments. Send automatic email and SMS notifications. Capture digital signatures for repair authorization, pickup and delivery. Record technician time logs and calculate labor costs. Track job expenses and business expenses. Collect customer reviews and feedback. Send maintenance and next-service reminders. Manage warranty claims. Provide customers with a customer portal. View repair business reports and analytics. Manage multiple users including administrators, managers and technicians. RepairBuddy is built around the real workflow of a repair business: Customer → Booking → Device → Evaluation → Estimate → Approval → Repair Job → Technician → Parts & Services → Payment → Pickup/Delivery → Review → Next Service Cell Phone Repair Shop Software RepairBuddy is an excellent fit for cell phone and smartphone repair shops. You can manage smartphones, tablets, accessories and other mobile devices while recording information such as: IMEI numbers Serial numbers Device notes Customer-provided information Repair services Parts Device condition Repair estimates Job status Payments Customer communications Customers can book phone repairs online, choose services, select appointment times, approve estimates and check repair status from your website. Computer Repair Shop Software RepairBuddy also works as computer repair shop software and computer repair CRM. Manage: Desktop computers Laptops Mac computers Windows PCs Tablets Computer components Hardware repairs Software services Diagnostics Upgrades Data-related services On-site computer services Create repair tickets, assign technicians, record diagnostics and notes, manage estimates, track payments and communicate with customers throughout the repair process. Flexible Repair Management for Other Industries RepairBuddy is not limited to phones and computers. Its customizable Device Type → Brand → Device structure can be adapted to many industries. For example: Auto Repair: Vehicle Type → Manufacturer → Model Watch Repair: Watch Type → Brand → Model Camera Repair: Camera Type → Brand → Model Appliance Repair: Appliance Type → Manufacturer → Model Drone Repair: Drone Type → Brand → Model Bicycle Repair: Bicycle Type → Brand → Model Jewelry Repair: Jewelry Type → Brand → Model TV Repair: TV Type → Brand → Model This flexible structure allows the same repair management workflow to be used for many different products and equipment types. Online Repair Booking System RepairBuddy includes an advanced online repair booking system for WordPress. Customers can: Select a device type Select a brand Select a device or model Select one or more repair services Add multiple devices to one booking Enter device information such as IMEI, serial number and notes Choose a preferred appointment date and time Choose a repair method Supported repair methods include: In-store repair Pickup service On-site repair Repair at the customer’s location Ship-in / mail-in repair After a booking is submitted: A draft estimate can be created automatically. An appointment can be created. Customers can receive email and SMS confirmations. Administrators can review and convert the booking into a repair job. Watch the RepairBuddy Demo See how RepairBuddy can be used for a cell phone repair business, including online booking, repair services, estimates and work orders: The same workflow can be adapted for computer repair and other repair industries by customizing device types, brands, devices, services and evaluation fields. Repair Shop Appointments & Scheduling RepairBuddy includes a complete appointment management system for repair businesses. Administrators can: Create appointments manually. Create appointments from repair bookings. Create appointments from repair jobs. Assign technicians. Manage appointment dates and times. View appointments in a calendar. Manage workloads and schedules. Technicians can view their assigned appointments and manage their repair workload. This is useful for repair shops offering in-store appointments, pickup and delivery, mobile repair and on-site service. Device, Brand & Model Management Create a flexible database of: Device Types Brands Devices / Models Repair Services Parts Extras The labels can be customized to match your industry. For example, a computer repair business can use: Computer Type → Manufacturer → Model while an auto repair business could use: Vehicle Type → Manufacturer → Model You can also collect identifiers such as IMEI numbers, serial numbers, registration numbers and custom fields. Pre-Repair & Post-Repair Device Evaluation Document the condition of a device or item before and after repair. Create customizable evaluation checkpoints for your business. For a cell phone repair shop, you could check: Screen Battery Camera Speakers Microphone Charging port Buttons Wi-Fi Bluetooth For a computer repair shop, you could check: Display Keyboard Touchpad USB ports Wi-Fi Speakers Battery Camera For other industries, create your own evaluation items and statuses. Evaluation statuses can include: Working Not Working Missing Not Checked Custom statuses Evaluation records can help document the condition of equipment before and after repair and provide a clear record for customers and technicians. Repair Services, Parts & Extras Create and manage the services your repair business provides. Add repair services. Set service pricing. Configure service availability by device type, brand or device. Add parts to repair jobs. Use WooCommerce products as parts. Add extra services or charges during job creation. Manage service and device pricing and eligibility. Repair Jobs & Work Orders Manage the complete repair process from intake to completion. Create repair jobs containing: Customer information Device information IMEI or serial number Services Parts Extras Technician assignments Notes Attachments Payments Job status Repair history Customer messages Signatures Evaluation records Generate professional repair tickets and work orders for your customers and technicians. Repair Estimates & Customer Approval Create professional repair estimates before beginning work. Customers can: View estimates online. Approve estimates. Reject estimates. Receive estimate notifications. Continue through the repair workflow after approval. Approved estimates can be converted into repair jobs. Technician Management Manage technicians and assign repair work efficiently. Assign jobs to technicians. Assign appointments to technicians. Support multiple technicians on a job. Provide technicians with their own dashboard. Track technician time. Review technician-related reports. Control access using user roles and permissions. Technician Time Tracking RepairBuddy includes a Time Log module for tracking technician work. Technicians can record time spent working on repair jobs and services. Administrators can define: Customer billing rates Technician payout rates Labor costs Use time logs to understand actual labor costs and compare them with the amount charged to customers. Time tracking is useful for repair shops, computer repair businesses, IT services, MSPs, diagnostics, consultations and on-site service work. Repair Tickets & QR Codes Generate repair tickets and work orders for individual repair jobs. Repair tickets can include QR codes that help identify and manage repair jobs. Use repair labels and tickets to keep physical devices organized throughout the repair process. Customer Portal Give customers access to their repair information through their account. Customers can view: Bookings Devices Estimates Repair jobs Invoices Payments Reviews Messages Repair history The customer portal integrates with the WooCommerce My Account system. Online Repair Status Checker Customers can check the status of their repair without needing to contact your shop. Use case numbers, job information or supported device identifiers to provide customers with access to their repair status. Display repair progress, messages and other relevant job information directly on your website. Email & SMS Notifications Keep customers informed automatically. RepairBuddy supports notifications for events such as: New bookings Booking confirmations Repair status changes Estimate notifications Payment notifications Invoice notifications Review requests Maintenance reminders Next service reminders Signature requests Create customized email and SMS messages for different repair job statuses. Digital Signatures Capture customer signatures digitally throughout the repair workflow. Use signatures for: Repair authorization Estimate approval Device pickup Device delivery Work orders Other customer approvals Signatures are linked to repair jobs and can be included in relevant documents and invoices. Invoices, Payments & Receipts Manage repair billing from inside RepairBuddy. Support includes: Online payments through WooCommerce Offline payments Cash payments Card payments Bank transfers Payment links Payment receipts Professional repair invoices Email invoices and receipts Thermal-size invoices Large-format invoices Repair Shop Expense Management Track expenses related to repair jobs and your overall repair business. Record expenses such as: Parts purchases Technician costs Outsourcing Travel Operational expenses Other business expenses Expenses can be categorized and associated with individual repair jobs. Filter expenses by job, technician, category, date and payment status. Use job revenue and expenses together to understand repair profitability. Customer Reviews & Feedback Build customer feedback into your repair workflow. Request reviews from customers. Collect ratings and comments. Link reviews to repair jobs. Send review requests manually or automatically. Display reviews using available RepairBuddy functionality. Maintenance & Next Service Reminders Bring customers back when their equipment needs another service. Create maintenance reminders based on your repair workflow and device information. Send reminders through email or SMS. The Next Service functionality can also help shops identify devices that are due for service and print service tags for upcoming service dates. Warranty Claims Manage warranty repair requests through your website. Customers can submit warranty claims and provide proof of purchase. Administrators can review warranty requests and approve or reject claims. Reports & Analytics Understand your repair business with reports and summaries. Track information related to: Repair jobs Sales Payments Outstanding balances Customers Technicians Job statuses Expenses Repair activity Use repair business reports to understand performance and make better operational decisions. Multi-User Repair Shop Management RepairBuddy supports different user roles and workflows. Administrators can manage the entire repair business. Shop managers can manage repair operations and technicians. Technicians can access the jobs and information they need to complete repairs. Customers can manage their repair information through their customer account. WooCommerce Integration RepairBuddy works with WooCommerce for payments and product-related functionality. Use WooCommerce products as repair parts and use WooCommerce payment gateways to accept online payments. This makes RepairBuddy a practical choice for WordPress websites that already use WooCommerce. Who Is RepairBuddy For? RepairBuddy is designed for repair and service businesses including: Cell phone repair shops Smartphone repair shops Mobile phone repair businesses Tablet repair shops Computer repair shops Laptop repair shops PC repair businesses Electronics repair shops Camera repair businesses Drone repair businesses Watch repair shops Jewelry repair businesses Bicycle repair shops TV repair businesses Home appliance repair businesses HVAC repair businesses Automotive repair businesses IT repair and service businesses On-site repair businesses Pickup and delivery repair businesses Mail-in / ship-in repair businesses If your business receives an item, diagnoses a problem, performs a service or repair, and returns the item to the customer, RepairBuddy can be customized to fit your workflow. RepairBuddy Premium The free version of RepairBuddy provides a powerful foundation for managing repair businesses from WordPress. For additional functionality and advanced repair management features, visit: https://www.repairbuddycrm.com/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C