This vulnerability (CWE-862) in the Chauffeur Taxi Booking System for WordPress involves missing authorization controls, enabling attackers to access functionality without proper permission checks. The affected versions include all releases up to 6.9. The CVSS 3.1 score is 8.2, reflecting network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No patch or official remediation has been disclosed by the vendor as of the publication date.

An attacker can exploit this vulnerability to access certain functions of the plugin without authorization, potentially leading to integrity loss and high impact on availability of the affected system. There is no confidentiality impact reported. The vulnerability could disrupt normal operations of the taxi booking system or allow unauthorized modifications.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's functionality through other means such as web application firewalls or limiting access to trusted users only. Monitor vendor channels for updates and apply patches promptly once available.