CVE-2026-93928

HIGHCVSS 7.3

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.

Timeline

Published:September 22nd, 2026 9:17 AM

Last modified:September 22nd, 2026 7:04 PM

CVSS Scoring

CVSS v3: 7.3 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-288

References & Reports

Advisories, patches, and third-party reports

https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vulnerability/wordpress-taxi-booking-manager-for-woocommerce-plugin-2-0-8-broken-authentication-vulnerability?_s_id=cve

Source: NIST NVD · Data may lag official sources by up to one minute