anonhaven

CVE-2026-93928

HIGH CVSS 3.1: 7.3 EPSS 0.40%
Updated Sep 22, 2026
Magepeople Inc.
Parameter Value
CVSS 7.3 (HIGH)
Affected Versions before 2.0.8.
Type CWE-288 (Authentication Bypass Using Alternate Path)
Vendor Magepeople Inc.
Public PoC No

Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-288 Authentication Bypass Using Alternate Path

Vulnerable Products

magepeople inc.:taxi booking manager for woocommerce

References 1

https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vuln…
NVD
Share Post Share Share Share