WordPress plugin
E-cab Taxi Booking Manager for Woocommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium11
- Low0
All E-cab Taxi Booking Manager for Woocommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤2.1.6Update to 2.1.7 | CVE-2026-114181 | |
| Medium5.3 | Missing Authroization ≤2.1.1Update to 2.1.2 | CVE-2026-103351 | |
| Medium5.3 | Missing Authorization <2.0.8Update to 2.0.8 | CVE-2026-93928 | |
| Medium5.3 | Unauthenticated Price Manipulation <2.0.5Update to 2.0.5 | CVE-2026-84045 | |
| Medium5.3 | Missing Authorization <2.0.8Update to 2.0.8 | CVE-2026-73363 | |
| Medium5.3 | Missing Authorization ≤2.0.3Update to 2.0.5 | CVE-2026-27345 | |
| Medium5.3 | Missing Authorization ≤2.0.1Update to 2.0.2 | CVE-2026-25426 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.0.0Update to 2.0.1 | CVE-2026-28040 | |
| Medium5.3 | Missing Authorization ≤1.3.0Update to 1.3.1 | CVE-2025-54713 | |
| Critical9.8 | Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover ≤1.3.0Update to 1.3.1 | CVE-2025-8898 | |
| Medium5.3 | Missing Authorization ≤1.2.1Update to 1.2.2 | CVE-2025-30839 | |
| High8.8 | Authenticated (Contributor+) PHP Object Injection ≤1.1.8Update to 1.1.9 | CVE-2025-24661 | |
| Medium4.0 | Authenticated (Admin+) Stored Cross-Site Scripting ≤1.0.9Update to 1.1.0 | CVE-2024-43986 |
- Medium5.3Missing Authorization
≤2.1.6Update to 2.1.7
- Medium5.3Missing Authroization
≤2.1.1Update to 2.1.2
- Medium5.3Missing Authorization
<2.0.8Update to 2.0.8
- Medium5.3Unauthenticated Price Manipulation
<2.0.5Update to 2.0.5
- Medium5.3Missing Authorization
<2.0.8Update to 2.0.8
- Medium5.3Missing Authorization
≤2.0.3Update to 2.0.5
- Medium5.3Missing Authorization
≤2.0.1Update to 2.0.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.0.0Update to 2.0.1
- Medium5.3Missing Authorization
≤1.3.0Update to 1.3.1
- Critical9.8Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover
≤1.3.0Update to 1.3.1
- Medium5.3Missing Authorization
≤1.2.1Update to 1.2.2
- High8.8Authenticated (Contributor+) PHP Object Injection
≤1.1.8Update to 1.1.9
- Medium4.0Authenticated (Admin+) Stored Cross-Site Scripting
≤1.0.9Update to 1.1.0
E-cab Taxi Booking Manager for Woocommerce: common questions
Does E-cab Taxi Booking Manager for Woocommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in E-cab Taxi Booking Manager for Woocommerce: 1 critical, 1 high, 11 medium. None are known to affect version null.
How do I check which version of E-cab Taxi Booking Manager for Woocommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent E-cab Taxi Booking Manager for Woocommerce vulnerability?
CVE-2026-114181, published Oct 29, 2026: E-cab Taxi Booking Manager for Woocommerce <= 2.1.6 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any E-cab Taxi Booking Manager for Woocommerce vulnerability listed in CISA KEV?
No. None of the known E-cab Taxi Booking Manager for Woocommerce vulnerabilities is currently listed in the CISA KEV catalog.