Is CVE-2026-84045 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84045?

CVE-2026-84045 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-84045

Description

The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking orders at an arbitrary price.