Is CVE-2026-81803 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-81803 being exploited in the wild.

How severe is CVE-2026-81803?

High severity, with a CVSS score of 7.5, published 10 September 2026.

Which products and versions are affected?

Webful Creations RepairBuddy <=4.1224.

Is there a fix for CVE-2026-81803?

A patch was published on 2026-09-10: Patch released as version 4.1225 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-81803 attacked?

It is attacked over the network.

Am I affected by CVE-2026-81803?

Check whether you run Webful Creations RepairBuddy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-81803: RepairBuddy Remote Code Execution in Subscriber function

Q: Is there a fix for CVE-2026-81803?

A patch was published on 2026-09-10: Patch released as version 4.1225 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-81803 attacked?

It is attacked over the network.

Q: Am I affected by CVE-2026-81803?

Check whether you run Webful Creations RepairBuddy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-81803 · Severity: high · CVSS 7.5 · Published 2026-09-10

RepairBuddy is a WordPress plugin used for managing computer repair shop operations and customer workflows. A vulnerability in versions up to 4.1224 allows users with subscriber-level privileges to execute arbitrary code on the web server, potentially leading to full system compromise, data theft, or website defacement.

Technologies: Webful Creations RepairBuddy. Vendors: Webful Creations.

Quick answers

Is CVE-2026-81803 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-81803 being exploited in the wild.
How severe is CVE-2026-81803?: High severity, with a CVSS score of 7.5, published 10 September 2026.
Which products and versions are affected?: Webful Creations RepairBuddy <=4.1224.
Is there a fix for CVE-2026-81803?: A patch was published on 2026-09-10: Patch released as version 4.1225 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-81803 attacked?: It is attacked over the network.
Am I affected by CVE-2026-81803?: Check whether you run Webful Creations RepairBuddy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The RepairBuddy plugin (<=4.1224) contains a remote code execution vulnerability accessible to subscribers, classified as an injection flaw. The vulnerability allows authenticated subscribers to execute arbitrary server-side commands without additional user interaction. The exact vulnerable component and injection point are not publicly disclosed in the references, but the low privilege requirement (subscriber role) and network-accessible attack vector make this particularly dangerous for multi-user WordPress installations. A patch is available in version 4.1225 and later.

Affected products

Webful Creations RepairBuddy <=4.1224

Timeline

2026-09-09: disclosed
2026-09-10: patched: Patch released as version 4.1225

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.