Threats tagged 'ghsa-776w-ggr3-w98f'

A Missing Authorization vulnerability (CVE-2026-124261) exists in Magepeople inc.'s Taxi Booking Manager for WooCommerce plugin up to version 2.1.7. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a medium severity with a CVSS score of 5.3 and impacts integrity without affecting confidentiality or availability.