CVE-2025-8898

CVE-2025-8898 concerns the WordPress plugin “Taxi Booking Manager for Woocommerce | E-cab”. The vulnerability allows privilege escalation via account takeover in all versions up to and including 1.3.0 (Wordfence notes 1.3.0; PT Security references 1.3.1+ as the fix). The root cause is insufficien...

PT-2025-33540 · WordPress · Taxi Booking Manager For Woocommerce | E-Cab Plugin +1

Name of the Vulnerable Software and Affected Versions: E-cab plugin for WordPress versions prior to 1.3.1 Description: The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover. This is due to insufficient validation of a user...