CVE-2026-25426mediumCWE-862

CVE-2026-25426: falha de média gravidade em Magepeople inc. Taxi Booking Manager for…

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerability

Publicada em 26 mai 2026 · Atualizada em 27 mai 2026

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%

probabilidade de exploração

0.2%top 92% das CVEs

exploração observada

nãonenhuma fonte reporta

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Produtos afetados

Magepeople inc. · Taxi Booking Manager for WooCommerce

CVEs relacionadas — Magepeople inc. Taxi Booking Manager for…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-93928HIGHWordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2026-103351MEDIUMWordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerabilityEPSS 0.2%CVE-2026-28040MEDIUMWordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%

Referências

https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vulnerability/wordpress-taxi-booking-manager-for-woocommerce-plugin-2-0-1-broken-access-control-vulnerability?_s_id=cve