This vulnerability in the Taxi Booking Manager for WooCommerce plugin arises from missing authorization checks, allowing attackers to bypass access control restrictions. Affected versions include all releases up to 1.2.1. The issue enables unauthorized users to perform actions that should require proper permissions, potentially leading to integrity impacts without affecting confidentiality or availability. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope.

The impact is limited to integrity as unauthorized users may modify data or perform restricted actions within the plugin. There is no direct impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's administrative functions and monitor for unusual activity related to the plugin. Avoid exposing the plugin interfaces to untrusted users.