一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月5日

CVE-2026-84045 [MEDIUM] – The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not vali

未分类
📑 文章目录

The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking orders at an arbitrary price.