CVE-2026-124261: WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.7 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The CVSS vector indicates it can be exploited remotely over the network without authentication or user interaction. No privileges are required.

Q: What is the expected impact if exploited?

The reported impact is limited to integrity, with no stated confidentiality or availability impact. The vulnerability is rated medium severity with a CVSS score of 5.3.

Q: Which plugin versions are affected?

Taxi Booking Manager for WooCommerce versions through 2.1.7 are affected. The available information does not identify a fixed version.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.7.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Taxi Booking Manager for WooCommerce to a version that resolves this vulnerability.
Fixed in 2.2.9

Event History

Nov 11, 2026

CVE Published

via MITRE·12:37 PM

Data Sourced

via MITRE·12:37 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates it can be exploited remotely over the network without authentication or user interaction. No privileges are required.

What is the expected impact if exploited?

The reported impact is limited to integrity, with no stated confidentiality or availability impact. The vulnerability is rated medium severity with a CVSS score of 5.3.

Which plugin versions are affected?

Taxi Booking Manager for WooCommerce versions through 2.1.7 are affected. The available information does not identify a fixed version.

CVE-2026-124261: WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.7 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploited?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploited?

Which plugin versions are affected?