CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.3.0.
Explanation of Vulnerability in Simple Terms
Taxi Booking Manager for WooCommerce versions 1.3.0 and earlier contain an authentication bypass vulnerability. An attacker can exploit weak or missing authentication checks to gain unauthorized access to the plugin's functionality without valid credentials. This affects all confidentiality, integrity, and availability of the booking system. Site administrators should update immediately to a patched version.
What an attacker can do
Gain full unauthorized access to the taxi booking system without valid credentials.
Potential impact on your site
Attackers can read, modify, or delete booking data and customer information without restriction.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
