https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:30:22 +0000 https://cve.radiocsirt.org/vuln/cve-2025-8898 <p><strong>Affected:</strong> magepeopleteam E-cab Taxi Booking Manager for Woocommerce</p> <p>The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0. This is due to the plugin not properly validating a user&#39;s capabilities prior to updating a plugin setting or their identity prior to updating their details like email address. This makes it possible for unauthenticated attackers to change arbitrary user&#39;s email addresses, including administrators, and leverage that to reset the user&#39;s password and gain access to their account. CVE-2025-54713 is likely a duplicate of this issue.</p> <p><strong>Affected:</strong> magepeopleteam E-cab Taxi Booking Manager for Woocommerce</p> <p>The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0. This is due to the plugin not properly validating a user&#39;s capabilities prior to updating a plugin setting or their identity prior to updating their details like email address. This makes it possible for unauthenticated attackers to change arbitrary user&#39;s email addresses, including administrators, and leverage that to reset the user&#39;s password and gain access to their account. CVE-2025-54713 is likely a duplicate of this issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-8898