CVE Catalog

CVE-2026-27345

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The Taxi Booking Manager for WooCommerce plugin versions up to 2.0.3 have an unauthenticated broken access control vulnerability. An unauthenticated user may gain unauthorized access to certain functions or data.

Risk Assessment

Risk of unauthorized access to sensitive functions or data without authentication, potentially leading to security breaches.

Recommendation

Update the Taxi Booking Manager for WooCommerce plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS