sales@hackhalt.com

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total11
Critical2
High3
Medium6
Reset
Showing 1-11 of 11 records
Threat Entry Updated 2026-06-17

Ecab Taxi Booking Manager - Privilege Escalation (CVE-2025-8898)

The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0. This is due to the plugin not properly validating a user's capabilities prior to updating a plugin setting or their identity prior to updating their details like email address. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. CVE-2025-54713 is likely a duplicate…

PLUGIN Ecab Taxi Booking Manager

CVE-2025-8898

CRITICAL CVSS 9.8 2025-08-16
Threat Entry Updated 2026-06-17

Ecab Taxi Booking Manager - Broken Access Control (CVE-2025-30839)

Missing Authorization vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through

PLUGIN Ecab Taxi Booking Manager

CVE-2025-30839

MEDIUM CVSS 5.3 2025-03-27