Extension WordPress

Vulnérabilités E-cab Taxi Booking Manager for Woocommerce

Cette page rassemble les failles publiées pour E-cab Taxi Booking Manager for Woocommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.

7Vulnérabilités
1Critiques
7Avec correctif
9,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de E-cab Taxi Booking Manager for Woocommerce

7 fiches

CVE-2026-28040 Moyenne · 6,4
E-cab Taxi Booking Manager for Woocommerce

E-cab Taxi Booking Manager for Woocommerce <= 2.0.0 – Authenticated (Contributor+) Stored Cross-Site Scripting

The E-cab Taxi Booking Manager for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…

Versions affectées

*-2.0.0

Correctif

2.0.1

Publication

23/04/2026

CVE-2025-8898 Critique · 9,8
E-cab Taxi Booking Manager for Woocommerce

Taxi Booking Manager for Woocommerce | E-cab <= 1.3.0 – Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover

The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0. This is due to the plugin not properly validating a user's…

Versions affectées

*-1.3.0

Correctif

1.3.1

Publication

15/08/2025

CVE-2025-24661 Élevée · 8,8
E-cab Taxi Booking Manager for Woocommerce

Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab <= 1.1.8 – Authenticated (Contributor+) PHP Object Injection

The Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.8 via deserialization of untrusted input. This makes it possible for…

Versions affectées

*-1.1.8

Correctif

1.1.9

Publication

20/01/2025

CVE-2024-43986 Moyenne · 4,0
E-cab Taxi Booking Manager for Woocommerce

Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab <= 1.0.9 – Authenticated (Admin+) Stored Cross-Site Scripting

The Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output…

Versions affectées

*-1.0.9

Correctif

1.1.0

Publication

29/08/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités