WordPress Plugin Vulnerabilities

Computer Repair Shop < 3.8116 - Unauthenticated Arbitrary File Upload

Description

The plugin is vulnerable to arbitrary file uploads due to missing file type validation. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affects Plugins

Plugin icon
computer-repair-shop
Fixed in 3.8116

References

CVE
CVE-2024-51793
URL
https://patchstack.com/database/vulnerability/computer-repair-shop/wordpress-repairbuddy-plugin-3-8115-arbitrary-file-upload-vulnerability

Miscellaneous

Original Researcher
stealthcopter
Verified
No
WPVDB ID
b2e75c52-7c06-4733-b7a3-0f2e5c6f001b

Timeline

Publicly Published
2024-11-08 (about 1 year ago)
Added
2024-11-13 (about 1 year ago)
Last Updated
2024-11-14 (about 1 year ago)

Other

Published
Title
Published
2023-01-04
Title
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
Published
2015-12-23
Title
NextGEN Gallery < 2.1.15 - Unrestricted File Upload
Published
2024-12-17
Title
WPLMS < 1.9.9.1 - Unauthenticated Arbitrary File Upload
Published
2024-03-28
Title
Salon booking system < 9.5.1 - Unauthenticated Arbitrary File Upload
Published
2025-06-11
Title
Ovatheme Events Manager < 1.8.5 - Unauthenticated Arbitrary File Upload