PT-2024-36696 · Webful Creations · Webful Creations Computer Repair Shop

Soprobro · Published 2024-12-31 · Updated 2025-01-02 · CVE-2024-56061

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Webful Creations Computer Repair Shop versions n/a through 3.8119

Description A Missing Authorization vulnerability is present in Webful Creations Computer Repair Shop software, allowing Privilege Escalation.

Recommendations For versions n/a through 3.8119, consider disabling the vulnerable authorization mechanism until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-56061

Affected Products

Webful Creations Computer Repair Shop

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-56061 · Security Note
• https://patchstack.com/database/wordpress/plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-3-8119-account-takeover-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/computer-repair-shop/vulnerability/wordpress-repairbuddy-plugin-3-8119-account-takeover-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1874087598500511781 · Twitter Post
• https://twitter.com/bluepinksec/status/1874965736709308914 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1874165756700565945 · Twitter Post
• https://twitter.com/CveFindCom/status/1874086125062455650 · Twitter Post
• https://t.me/cvenotify/105833 · Telegram Post
• https://t.me/cvedetector/14028 · Telegram Post