Plugin icon

E-cab Taxi Booking Manager for Woocommerce

ecab-taxi-booking-manager

Vulnerabilities:

12

Last Updated:

October 14, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-10-05
Title
E-cab Taxi Booking Manager for Woocommerce < 2.1.2 - Missing Authroization
Fixed in
Fixed in 2.1.2
CVSS
5.3 (medium)
Published
2026-09-19
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
Fixed in
Fixed in 2.0.8
CVSS
5.3 (medium)
Published
2026-09-02
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation via mptbm_add_to_cart
Fixed in
Fixed in 2.0.5
CVSS
5.3 (medium)
Published
2026-08-19
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
Fixed in
Fixed in 2.0.8
CVSS
5.3 (medium)
Published
2026-08-10
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Missing Authorization
Fixed in
Fixed in 2.0.5
CVSS
5.3 (medium)
Published
2026-05-26
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.2 - Missing Authorization
Fixed in
Fixed in 2.0.2
CVSS
5.3 (medium)
Published
2026-04-23
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.1
CVSS
5.5 (medium)
Published
2025-08-25
Title
Taxi Booking Manager for WooCommerce < 1.3.1 - Missing Authorization
Fixed in
Fixed in 1.3.1
CVSS
5.3 (medium)
Published
2025-08-15
Title
Taxi Booking Manager for Woocommerce | E-cab < 1.3.1 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover
Fixed in
Fixed in 1.3.1
CVSS
9.8 (critical)
Published
2025-03-27
Title
Taxi Booking Manager for WooCommerce < 1.2.2 - Missing Authorization
Fixed in
Fixed in 1.2.2
CVSS
5.3 (medium)
Published
2025-01-20
Title
Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab < 1.1.9 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 1.1.9
CVSS
8.8 (high)
Published
2024-08-29
Title
Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab < 1.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.1.0
CVSS
4 (medium)