CVE-2026-114181: WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.6.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Taxi Booking Manager for WooCommerceto a version that resolves this vulnerability.Fixed in 2.1.7
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is rated network-accessible with low attack complexity, requires no privileges, and requires no user interaction. This indicates an unauthenticated remote attacker may be able to reach the affected access-control flaw.
What is the security impact?
The provided vector indicates integrity impact only, with no stated confidentiality or availability impact. An attacker may be able to perform unauthorized modifications permitted by the incorrectly configured access-control levels.
Which plugin versions are affected?
Taxi Booking Manager for WooCommerce versions through 2.1.6 are affected. The supplied information does not identify a fixed version.