CVE-2026-103351: WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation can be performed over the network with low attack complexity. It does not require prior privileges or user interaction.

Q: What is the expected security impact?

The reported impact is limited to integrity, with no reported confidentiality or availability impact. The listed severity is medium, with a CVSS score of 5.3.

Published Oct 5, 2026

Updated

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1.

Affected Software

1 affected component

MagePeople Taxi Booking Manager for WooCommerce<=2.1.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Magepeople inc. Taxi Booking Manager for WooCommerce to a version that resolves this vulnerability.
Fixed in 2.1.2

Event History

Oct 5, 2026

CVE Published

via MITRE·08:58 AM

Data Sourced

via MITRE·08:58 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation can be performed over the network with low attack complexity. It does not require prior privileges or user interaction.

What is the expected security impact?