This vulnerability is a missing authorization issue (CWE-862) in the Taxi Booking Manager for WooCommerce plugin, versions up to 2.0.3. It allows unauthenticated attackers to bypass access controls and perform unauthorized actions that impact data integrity. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to integrity. No official patch or remediation guidance has been published by the vendor as of the data provided.

The vulnerability enables unauthenticated attackers to bypass access controls, potentially modifying or manipulating data within the affected plugin. There is no confidentiality or availability impact indicated. This could lead to unauthorized changes in the taxi booking system's data or operations, impacting the integrity of the service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the plugin's interfaces or disabling the plugin if feasible may reduce exposure.