Live › vulnerability › CVE-2026-114181
Taxi Booking Manager for WooCommerce, a WordPress plugin from Magepeople, has a missing authorization check in versions through 2.1.6. The sources say an attacker can exploit incorrectly configured access control levels to reach functions they should not.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Sites running the Taxi Booking Manager for WooCommerce plugin (ecab-taxi-booking-manager) at version 2.1.6 or earlier are in scope. The sources do not say which specific endpoints or roles are reachable, so whether a given site is exposed is unknown.
No product ranges from the sources yet.
ecab-taxi-booking-manager plugin in the WordPress admin plugin list.2.1.6; the sources say versions through 2.1.6 are affected.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-114181")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.