CVE-2026-103351— WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability
Quick assessment
Affected
Magepeople inc. Taxi Booking Manager for WooCommerce
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
输入中指定数量的验证不当漏洞存在于 Magepeople Inc. 的 WooCommerce 出租车预订管理器（ecab-taxi-booking-manager）中，该漏洞允许输入数据篡改。此问题影响 WooCommerce 出租车预订管理器：从 n/a 到 2.1.1 版本。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103351
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1284
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Magepeople inc. | Taxi Booking Manager for WooCommerce | 0 ~ 2.1.1 | - |
|
II. Public POCs for CVE-2026-103351
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103351
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-103351 (1)
IV. Related Vulnerabilities
Same product: Taxi Booking Manager for WooCommerce
-
CVE-2026-93928
WordPress Taxi Booking Manager for WooCommerce plugin < 2.0. -
CVE-2026-73363
WordPress Taxi Booking Manager for WooCommerce plugin < 2.0. -
CVE-2026-27345
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0 -
CVE-2026-25426
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0 -
CVE-2026-28040
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0
Same vendor: Magepeople inc.
-
CVE-2026-62063
WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control -
CVE-2026-93928
WordPress Taxi Booking Manager for WooCommerce plugin < 2.0. -
CVE-2026-81802
WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object -
CVE-2026-85303
WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross -
CVE-2026-81761
WordPress WpEvently plugin <= 5.5.0 - Broken Access Control
Same weakness: CWE-1284
-
CVE-2026-103065
WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution v -
CVE-2026-94645
Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared -
CVE-2026-91137
Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte -
CVE-2026-102111
Kiteworks Core Improper Validation of Specified Quantity in -
CVE-2026-62083
WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability
V. Comments for CVE-2026-103351
No comments yet