CVE-2026-93928: WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass.
This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
magepeople/taxi-booking-manager-for-woocommerceto a version that resolves this vulnerability.Fixed in 2.0.8
Event History
Frequently Asked Questions
Which deployments should be prioritized for remediation?
Deployments running Taxi Booking Manager for WooCommerce versions earlier than 2.0.8 should be prioritized. The issue is rated high severity with network access, low attack complexity, and no required privileges or user interaction.
What access does an attacker need to exploit this issue?
The vulnerability can be exploited remotely over the network. It does not require an existing account, special privileges, or user interaction.
What is the potential impact if exploitation succeeds?
Successful exploitation may allow authentication bypass and can affect confidentiality, integrity, and availability at a low impact level.
How can I determine whether my site is affected?
Check whether the MagePeople Taxi Booking Manager for WooCommerce plugin is installed and identify its version. Versions earlier than 2.0.8 are affected; the available data does not identify a specific lower version boundary.