CVE-2026-93928
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
The Taxi Booking Manager for WooCommerce plugin by Magepeople inc. contains an Authentication Bypass vulnerability using an alternate path or channel. This issue affects versions before 2.0.8.
Risk Assessment
An attacker could bypass authentication and gain access to protected functionality, potentially leading to unauthorized actions on the site.
Recommendation
Update the Taxi Booking Manager for WooCommerce plugin to version 2.0.8 or later.
Other vulnerabilities in Taxi Booking Manager for WooCommerce
See all- CVE-2026-73363Medium
Unauthenticated Broken Access Control vulnerability in Taxi Booking Manager for WooCommerce versions prior to 2.0.8. An attacker without authentication can exploit this to perform unauthorized actions.
- CVE-2026-27345High
The Taxi Booking Manager for WooCommerce plugin versions up to 2.0.3 have an unauthenticated broken access control vulnerability. An unauthenticated user may gain unauthorized access to certain functions or data.
- CVE-2026-25426Medium
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows exploiting incorrectly configured access control security levels. This affects versions from n/a through 2.0.1.
Original NVD description (English source)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS