Magepeople Taxi Booking Manager for WooCommerce Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the Taxi Booking Manager for WooCommerce plugin, developed by Magepeople Inc. This vulnerability allows unauthorized users to exploit improperly configured access control levels. It affects versions of the plugin from an unknown release up to and including 2.0.1.

Impact

Exploitation of this vulnerability could allow an unauthorized user to perform actions that require higher privileges, due to the lack of proper authorization checks.

Remediation

Users of the Taxi Booking Manager for WooCommerce plugin should update to version 2.0.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.