CVE-2026-84045
E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation via mptbm_add_to_cart
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking orders at an arbitrary price.
| Vendor | unknown |
| Product | e-cab taxi booking manager for woocommerce |
| Published | Sep 4, 2026 |
| Last Updated | Sep 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown e-cab taxi booking manager for woocommerce
Be the first to know when new medium vulnerabilities affecting unknown e-cab taxi booking manager for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Unknown / E-cab Taxi Booking Manager for Woocommerce
2.0.1 < 2.0.5
References
Credits
Muni Nitish Kumar Yaddala WPScan