PT-2026-85471 · WordPress · E-Cab Taxi Booking Manager
CVE-2026-84045
·
Published
2026-09-04
·
Updated
2026-09-04
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
E-cab Taxi Booking Manager for Woocommerce WordPress plugin versions prior to 2.0.5
Description
Lack of server-side validation for client-supplied values allows unauthenticated attackers to manipulate the order total. By modifying the
trip distance and base-price variables, an attacker can reduce the cost of a booking to zero and place taxi orders at an arbitrary price.Recommendations
Update the plugin to version 2.0.5 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
E-Cab Taxi Booking Manager