WordPress security by component
Taxi Booking Manager for WooCommerce
Plugin description
Taxi Booking Manager for WooCommerce is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published May 26, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
ecab-taxi-booking-managerLatest vulnerability
CVE-2026-25426: Taxi Booking Manager for WooCommerce: A security weakness
Taxi Booking Manager for WooCommerce is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.0.1.
| Safe version |
|
||
|---|---|---|---|
| May 26, 2026 |
CVE-2026-25426
Taxi Booking Manager for WooCommerce: A security weakness
Taxi Booking Manager for WooCommerce is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.0.1.
|
2.0.2 |
CVE5.3
NVDPending
|
| Apr 23, 2026 |
CVE-2026-28040
Taxi Booking Manager for WooCommerce: Cross-site scripting
Taxi Booking Manager for WooCommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 2.0.0.
|
2.0.1 |
CVE6.5
NVDPending
|
| Aug 20, 2025 |
CVE-2025-54713
Taxi Booking Manager for WooCommerce: Privilege escalation or authentication bypass
Taxi Booking Manager for WooCommerce is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Aug 16, 2025 |
CVE-2025-8898
Taxi Booking Manager for Woocommerce | E-cab: Privilege escalation or authentication bypass
Taxi Booking Manager for Woocommerce | E-cab is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Mar 27, 2025 |
CVE-2025-30839
Taxi Booking Manager for WooCommerce: A security weakness
Taxi Booking Manager for WooCommerce is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Feb 03, 2025 |
CVE-2025-24661
Taxi Booking Manager for WooCommerce: Code execution
Taxi Booking Manager for WooCommerce is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Aug 29, 2024 |
CVE-2024-43986
Taxi Booking Manager for WooCommerce: Cross-site scripting
Taxi Booking Manager for WooCommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.9
NVD4.8
|