This vulnerability (CVE-2026-93928) in Magepeople inc.'s Taxi Booking Manager for WooCommerce is classified as CWE-288: Authentication Bypass Using an Alternate Path or Channel. It allows an attacker to bypass authentication controls by exploiting an alternate path or channel in the application. The affected versions are all versions before 2.0.8. The CVSS v3.1 score is 7.3, with attack vector network, low complexity, no privileges, and no user interaction required. The impact includes limited confidentiality, integrity, and availability losses. There is no vendor advisory or patch information provided, so the patch status is not confirmed.

Successful exploitation of this vulnerability could allow an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the application. This could lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, no known exploits in the wild are reported, and no further impact details are available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, monitor vendor communications for updates. No specific mitigation steps are provided in the available data.