Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

12 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-103351	Aplazada	Media (5.3)	0.23%	—	Magepeople Taxi Booking Manager^AI	5/10/2026	6/10/2026	Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1.
CVE-2026-93928	Aplazada	Alta (7.3)	0.40%	—	Magepeople Taxi Booking Manager FOR Woocommerce^AI	22/9/2026	22/9/2026	Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.
CVE-2026-84045	Aplazada	Media (5.3)	0.32%	—	E-cab E CAB Taxi Booking Manager^AI	4/9/2026	8/9/2026	The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking orders at an arbitrary…
CVE-2026-73363	Aplazada	Media (6.5)	0.30%	—	Taxi Booking Manager^AI	19/8/2026	20/8/2026	Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions.
CVE-2026-27345	Aplazada	Alta (7.5)	0.35%	—	Taxi Booking Manager^AI	13/8/2026	14/8/2026	Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions.
CVE-2026-25426	Aplazada	Media (5.3)	0.19%	—	Magepeople Taxi Booking Manager FOR Woocommerce^AI	26/5/2026	24/7/2026	Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.
CVE-2026-28040	Aplazada	Media (6.5)	0.22%	—	Magepeople Taxi Booking Manager FOR Woocommerce^AI	23/4/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.0.
CVE-2025-54713	Aplazada	Crítica (9.8)	0.56%	—	Magepeopleteam Taxi Booking Manager FOR Woocommerce^AI	20/8/2025	17/6/2026	Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.3.0.
CVE-2025-8898	Aplazada	Crítica (9.8)	0.47%	—	E-cab Taxi Booking Manager FOR Woocommerce^AI	16/8/2025	17/6/2026	The Taxi Booking Manager for Woocommerce \| E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0. This is due to the plugin not properly validating a user's capabilities prior to updating a plugin setting or their identity prior to updating…
CVE-2025-30839	Aplazada	Media (5.3)	0.49%	—	Magepeopleteam Taxi Booking Manager FOR Woocommerce^AI	27/3/2025	17/6/2026	Missing Authorization vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.2.1.
CVE-2025-24661	Aplazada	Alta (8.8)	0.63%	—	Magepeopleteam Taxi Booking Manager FOR Woocommerce^AI	3/2/2025	17/6/2026	Deserialization of Untrusted Data vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.1.8.
CVE-2024-43986	Analizada	Media (4.8)	0.28%	—	Mage-people Ecab Taxi Booking Manager	29/8/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9.