CVE-2026-25426
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows exploiting incorrectly configured access control security levels. This affects versions from n/a through 2.0.1.
Risk Assessment
An attacker could gain unauthorized access to booking management functions, potentially leading to data compromise or privilege escalation.
Recommendation
Update the Taxi Booking Manager for WooCommerce plugin to the latest version containing the security fix.
Other vulnerabilities in Taxi Booking Manager for WooCommerce
See all- CVE-2026-73363Medium
Unauthenticated Broken Access Control vulnerability in Taxi Booking Manager for WooCommerce versions prior to 2.0.8. An attacker without authentication can exploit this to perform unauthorized actions.
- CVE-2026-27345High
The Taxi Booking Manager for WooCommerce plugin versions up to 2.0.3 have an unauthenticated broken access control vulnerability. An unauthenticated user may gain unauthorized access to certain functions or data.
Original NVD description (English source)
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.